./Ultimate.py --spec /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/properties/termination.prp --file /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version fca748b1 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a24bdc0807d94f83606acfe112db107808ae7409e0ad1ecc1d01e9704d0b4ece --- Real Ultimate output --- This is Ultimate 0.2.5-wip.dd.update-z3-fca748b-m [2024-11-20 22:43:41,394 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-20 22:43:41,454 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-20 22:43:41,460 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-20 22:43:41,462 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-20 22:43:41,496 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-20 22:43:41,496 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-20 22:43:41,496 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-20 22:43:41,497 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-20 22:43:41,500 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-20 22:43:41,500 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-20 22:43:41,500 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-20 22:43:41,501 INFO L153 SettingsManager]: * Use SBE=true [2024-11-20 22:43:41,501 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-20 22:43:41,501 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-20 22:43:41,502 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-20 22:43:41,502 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-20 22:43:41,502 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-20 22:43:41,502 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-20 22:43:41,503 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-20 22:43:41,507 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-20 22:43:41,509 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-20 22:43:41,509 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-20 22:43:41,509 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-20 22:43:41,509 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-20 22:43:41,509 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-20 22:43:41,510 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-20 22:43:41,510 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-20 22:43:41,510 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-20 22:43:41,510 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-20 22:43:41,511 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-20 22:43:41,511 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-20 22:43:41,511 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-20 22:43:41,511 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-20 22:43:41,511 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-20 22:43:41,512 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-20 22:43:41,512 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-20 22:43:41,513 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-20 22:43:41,514 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-20 22:43:41,514 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a24bdc0807d94f83606acfe112db107808ae7409e0ad1ecc1d01e9704d0b4ece [2024-11-20 22:43:41,791 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-20 22:43:41,815 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-20 22:43:41,818 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-20 22:43:41,819 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-20 22:43:41,820 INFO L274 PluginConnector]: CDTParser initialized [2024-11-20 22:43:41,821 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c [2024-11-20 22:43:43,243 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-20 22:43:43,546 INFO L384 CDTParser]: Found 1 translation units. [2024-11-20 22:43:43,546 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c [2024-11-20 22:43:43,563 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/70b1720d5/c59696efd7a74cac9b7c58f125d46f13/FLAGb284afc68 [2024-11-20 22:43:43,575 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/70b1720d5/c59696efd7a74cac9b7c58f125d46f13 [2024-11-20 22:43:43,578 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-20 22:43:43,579 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-20 22:43:43,580 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-20 22:43:43,580 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-20 22:43:43,585 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-20 22:43:43,588 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:43:43" (1/1) ... [2024-11-20 22:43:43,589 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@76f6e453 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:43, skipping insertion in model container [2024-11-20 22:43:43,589 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:43:43" (1/1) ... [2024-11-20 22:43:43,650 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-20 22:43:44,173 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-20 22:43:44,195 INFO L200 MainTranslator]: Completed pre-run [2024-11-20 22:43:44,206 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [48] [2024-11-20 22:43:44,208 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [57] [2024-11-20 22:43:44,208 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [1490] [2024-11-20 22:43:44,208 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [1849] [2024-11-20 22:43:44,209 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2515] [2024-11-20 22:43:44,209 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [2881] [2024-11-20 22:43:44,210 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2894] [2024-11-20 22:43:44,210 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [2985] [2024-11-20 22:43:44,210 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [3104] [2024-11-20 22:43:44,210 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [3139] [2024-11-20 22:43:44,282 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-20 22:43:44,311 INFO L204 MainTranslator]: Completed translation [2024-11-20 22:43:44,312 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44 WrapperNode [2024-11-20 22:43:44,312 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-20 22:43:44,313 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-20 22:43:44,313 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-20 22:43:44,313 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-20 22:43:44,318 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,346 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,555 INFO L138 Inliner]: procedures = 88, calls = 330, calls flagged for inlining = 183, calls inlined = 227, statements flattened = 7532 [2024-11-20 22:43:44,556 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-20 22:43:44,556 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-20 22:43:44,557 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-20 22:43:44,557 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-20 22:43:44,567 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,568 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,590 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,651 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-20 22:43:44,652 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,652 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,703 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,760 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,775 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,793 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,819 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-20 22:43:44,821 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-20 22:43:44,821 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-20 22:43:44,822 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-20 22:43:44,822 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (1/1) ... [2024-11-20 22:43:44,827 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-20 22:43:44,839 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-20 22:43:44,858 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-20 22:43:44,864 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-20 22:43:44,905 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-20 22:43:44,905 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-20 22:43:44,905 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-20 22:43:44,907 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-20 22:43:44,907 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-20 22:43:44,907 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-20 22:43:44,907 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-20 22:43:44,907 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-20 22:43:44,907 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-20 22:43:44,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-20 22:43:44,909 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-20 22:43:44,909 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-20 22:43:45,086 INFO L238 CfgBuilder]: Building ICFG [2024-11-20 22:43:45,087 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-20 22:43:49,180 INFO L? ?]: Removed 3485 outVars from TransFormulas that were not future-live. [2024-11-20 22:43:49,180 INFO L287 CfgBuilder]: Performing block encoding [2024-11-20 22:43:49,236 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-20 22:43:49,237 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-20 22:43:49,237 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:43:49 BoogieIcfgContainer [2024-11-20 22:43:49,237 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-20 22:43:49,238 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-20 22:43:49,238 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-20 22:43:49,242 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-20 22:43:49,242 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-20 22:43:49,243 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 20.11 10:43:43" (1/3) ... [2024-11-20 22:43:49,243 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7f58b4ed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 20.11 10:43:49, skipping insertion in model container [2024-11-20 22:43:49,243 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-20 22:43:49,244 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:43:44" (2/3) ... [2024-11-20 22:43:49,244 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7f58b4ed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 20.11 10:43:49, skipping insertion in model container [2024-11-20 22:43:49,244 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-20 22:43:49,244 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:43:49" (3/3) ... [2024-11-20 22:43:49,245 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product01.cil.c [2024-11-20 22:43:49,336 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-20 22:43:49,336 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-20 22:43:49,336 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-20 22:43:49,336 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-20 22:43:49,336 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-20 22:43:49,337 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-20 22:43:49,337 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-20 22:43:49,337 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-20 22:43:49,351 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2275 states, 2274 states have (on average 1.8768689533861038) internal successors, (4268), 2274 states have internal predecessors, (4268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:49,439 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1087 [2024-11-20 22:43:49,442 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:43:49,442 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:43:49,461 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:49,461 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:49,462 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-20 22:43:49,467 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2275 states, 2274 states have (on average 1.8768689533861038) internal successors, (4268), 2274 states have internal predecessors, (4268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:49,494 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1087 [2024-11-20 22:43:49,494 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:43:49,494 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:43:49,498 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:49,499 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:49,506 INFO L745 eck$LassoCheckResult]: Stem: 162#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2198#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 868#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 520#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 647#valid_product_returnLabel#1true main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 399#L1836true assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1495#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1792#__utac_acc__Specification1_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 702#L3030true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 173#getOrigin_returnLabel#1true bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2200#L2208true assume 0 == initPersonOnFloor_~floor#1; 2041#L2209true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 328#L2316-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1035#L3161true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2065#L3173-2true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1664#L2000true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 354#L2012-2true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 952#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 395#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 183#L3030-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 359#getOrigin_returnLabel#2true angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 294#L2208-1true assume 0 == initPersonOnFloor_~floor#1; 629#L2209-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2212#L2316-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 115#L3161-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 296#L3173-5true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 748#L2000-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 463#L2012-5true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 956#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 681#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 199#L1932true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 87#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 326#L885true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 248#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 467#L1034true assume !(0 != timeShift_~tmp___9~2#1); 1545#L1125true assume !(1 == ~doorState~0); 69#L1125-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1465#L476true assume !(1 == stopRequestedInDirection_~dir#1); 1558#L645true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1597#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 119#L1133true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 711#L852true assume !(1 == ~currentHeading~0); 1505#L862true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 122#L862-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 936#L868-1true havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1286#L1142-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1039#getCurrentFloorID_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1312#L3199true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 194#L3200true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 685#areDoorsOpen_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 132#L3204true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 891#L3259true havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1914#timeShift_returnLabel#1true havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 223#L1637-2true [2024-11-20 22:43:49,510 INFO L747 eck$LassoCheckResult]: Loop: 223#L1637-2true assume !false; 180#L1638true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1601#L1641true assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 864#isBlocked_returnLabel#1true cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1661#L1645true assume 1 != cleanup_~tmp___0~6#1; 1140#L1645-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 542#L1932-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1386#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 216#L380true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 133#anyStopRequested_returnLabel#1true isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1082#isIdle_returnLabel#1true cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1798#L1657true assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 91#L1932-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1092#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 545#L885-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1977#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1905#L1034-2true assume !(0 != timeShift_~tmp___9~2#1); 1703#L1125-3true assume 1 == ~doorState~0;~doorState~0 := 0; 820#L1125-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1611#L476-2true assume !(1 == stopRequestedInDirection_~dir#1); 192#L645-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1128#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 536#L1133-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 575#L852-3true assume !(1 == ~currentHeading~0); 253#L862-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1941#L862-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1921#L868-7true havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 976#L1142-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1309#getCurrentFloorID_returnLabel#2true __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1045#L3199-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2067#L3200-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1353#areDoorsOpen_returnLabel#6true __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1838#L3204-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 2094#L3259-1true havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1939#timeShift_returnLabel#2true havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 223#L1637-2true [2024-11-20 22:43:49,519 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:49,520 INFO L85 PathProgramCache]: Analyzing trace with hash -1122916155, now seen corresponding path program 1 times [2024-11-20 22:43:49,529 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:49,530 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1620534196] [2024-11-20 22:43:49,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:49,531 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:49,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:49,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:49,973 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:49,973 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1620534196] [2024-11-20 22:43:49,974 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1620534196] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:49,974 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:49,974 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:43:49,975 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1399645044] [2024-11-20 22:43:49,976 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:49,980 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:43:49,981 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:49,981 INFO L85 PathProgramCache]: Analyzing trace with hash -452256857, now seen corresponding path program 1 times [2024-11-20 22:43:49,982 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:49,982 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740066762] [2024-11-20 22:43:49,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:49,982 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:49,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:50,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:50,092 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:50,092 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740066762] [2024-11-20 22:43:50,093 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1740066762] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:50,093 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:50,093 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-20 22:43:50,093 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792238915] [2024-11-20 22:43:50,093 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:50,094 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:43:50,095 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:43:50,121 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-20 22:43:50,122 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-20 22:43:50,128 INFO L87 Difference]: Start difference. First operand has 2275 states, 2274 states have (on average 1.8768689533861038) internal successors, (4268), 2274 states have internal predecessors, (4268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:50,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:43:50,381 INFO L93 Difference]: Finished difference Result 2269 states and 4254 transitions. [2024-11-20 22:43:50,383 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 2269 states and 4254 transitions. [2024-11-20 22:43:50,404 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1089 [2024-11-20 22:43:50,427 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 2269 states to 2251 states and 4234 transitions. [2024-11-20 22:43:50,429 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 2251 [2024-11-20 22:43:50,432 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 2251 [2024-11-20 22:43:50,433 INFO L73 IsDeterministic]: Start isDeterministic. Operand 2251 states and 4234 transitions. [2024-11-20 22:43:50,447 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:43:50,447 INFO L218 hiAutomatonCegarLoop]: Abstraction has 2251 states and 4234 transitions. [2024-11-20 22:43:50,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2251 states and 4234 transitions. [2024-11-20 22:43:50,546 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2251 to 2251. [2024-11-20 22:43:50,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2251 states, 2251 states have (on average 1.8809418036428254) internal successors, (4234), 2250 states have internal predecessors, (4234), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:50,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2251 states to 2251 states and 4234 transitions. [2024-11-20 22:43:50,562 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2251 states and 4234 transitions. [2024-11-20 22:43:50,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-20 22:43:50,570 INFO L425 stractBuchiCegarLoop]: Abstraction has 2251 states and 4234 transitions. [2024-11-20 22:43:50,571 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-20 22:43:50,571 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2251 states and 4234 transitions. [2024-11-20 22:43:50,584 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1089 [2024-11-20 22:43:50,585 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:43:50,585 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:43:50,590 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:50,591 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:50,591 INFO L745 eck$LassoCheckResult]: Stem: 4935#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 4936#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 6023#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5567#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 5568#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 5379#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 5380#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6563#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 5820#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 4962#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4963#L2208 assume 0 == initPersonOnFloor_~floor#1; 6783#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4721#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 5249#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 6198#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6650#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5299#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 5300#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5373#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 4979#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 4623#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5188#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 5189#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4809#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 4830#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 4831#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 5194#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5478#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 5479#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5797#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 5015#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 4731#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 4767#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 5246#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 5293#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 5975#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 5976#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 6807#L1034 assume !(0 != timeShift_~tmp___9~2#1); 6591#L1125 assume !(1 == ~doorState~0); 4722#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4723#L476 assume !(1 == stopRequestedInDirection_~dir#1); 6544#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 4681#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 4838#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 4840#L852 assume !(1 == ~currentHeading~0); 5833#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4846#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4847#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5382#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6204#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 6205#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 5002#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 5003#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 4870#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 4871#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6050#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 5056#L1637-2 [2024-11-20 22:43:50,592 INFO L747 eck$LassoCheckResult]: Loop: 5056#L1637-2 assume !false; 4975#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 4976#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 6017#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 6018#L1645 assume 1 != cleanup_~tmp___0~6#1; 6306#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 5606#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 5607#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 5045#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 4858#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 4873#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 6255#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 4777#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 4638#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 5614#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 5616#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 5309#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 5623#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 6698#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 6806#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 6669#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5971#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5972#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 4999#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 4754#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 5594#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 5595#L852-3 assume !(1 == ~currentHeading~0); 5115#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5116#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6750#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6136#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6137#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 6210#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6211#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 6457#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 6458#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 5577#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6759#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 5056#L1637-2 [2024-11-20 22:43:50,593 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:50,593 INFO L85 PathProgramCache]: Analyzing trace with hash 449391300, now seen corresponding path program 1 times [2024-11-20 22:43:50,594 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:50,594 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [282125791] [2024-11-20 22:43:50,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:50,594 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:50,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:50,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:50,745 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:50,746 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [282125791] [2024-11-20 22:43:50,746 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [282125791] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:50,746 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:50,746 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:43:50,747 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1893112122] [2024-11-20 22:43:50,747 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:50,747 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:43:50,748 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:50,748 INFO L85 PathProgramCache]: Analyzing trace with hash 2100900210, now seen corresponding path program 1 times [2024-11-20 22:43:50,748 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:50,749 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2141795742] [2024-11-20 22:43:50,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:50,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:50,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:50,866 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:50,867 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:50,867 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2141795742] [2024-11-20 22:43:50,867 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2141795742] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:50,867 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:50,868 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:43:50,868 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [70106394] [2024-11-20 22:43:50,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:50,868 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:43:50,869 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:43:50,871 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-20 22:43:50,871 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-20 22:43:50,871 INFO L87 Difference]: Start difference. First operand 2251 states and 4234 transitions. cyclomatic complexity: 1984 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:52,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:43:52,046 INFO L93 Difference]: Finished difference Result 4538 states and 8454 transitions. [2024-11-20 22:43:52,046 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4538 states and 8454 transitions. [2024-11-20 22:43:52,080 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2233 [2024-11-20 22:43:52,111 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4538 states to 4538 states and 8454 transitions. [2024-11-20 22:43:52,112 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4538 [2024-11-20 22:43:52,118 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4538 [2024-11-20 22:43:52,118 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4538 states and 8454 transitions. [2024-11-20 22:43:52,127 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:43:52,127 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4538 states and 8454 transitions. [2024-11-20 22:43:52,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4538 states and 8454 transitions. [2024-11-20 22:43:52,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4538 to 4448. [2024-11-20 22:43:52,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4448 states, 4448 states have (on average 1.8803956834532374) internal successors, (8364), 4447 states have internal predecessors, (8364), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:52,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4448 states to 4448 states and 8364 transitions. [2024-11-20 22:43:52,280 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4448 states and 8364 transitions. [2024-11-20 22:43:52,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-20 22:43:52,281 INFO L425 stractBuchiCegarLoop]: Abstraction has 4448 states and 8364 transitions. [2024-11-20 22:43:52,282 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-20 22:43:52,282 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4448 states and 8364 transitions. [2024-11-20 22:43:52,306 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2184 [2024-11-20 22:43:52,306 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:43:52,307 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:43:52,309 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:52,309 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:52,309 INFO L745 eck$LassoCheckResult]: Stem: 11747#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 11748#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 12897#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 12399#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 12400#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 12198#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 12199#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 13510#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 12679#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 11772#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 11773#L2208 assume 0 == initPersonOnFloor_~floor#1; 13820#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 11528#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 12061#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 13088#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 13627#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 13628#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 13934#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 13933#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 13929#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 13926#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 13925#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 13901#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 13868#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 11639#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 11640#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 12006#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 12749#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 13887#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 13886#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 13884#L1932 assume !(0 == isFloorCalling_~floorID#1); 13885#L1936 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 13879#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 13878#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 13866#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 12107#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 12845#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 12846#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 13882#L1034 assume !(0 != timeShift_~tmp___9~2#1); 13883#L1125 assume !(1 == ~doorState~0); 15597#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 15596#L476 assume !(1 == stopRequestedInDirection_~dir#1); 15547#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 15544#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 15542#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 15543#L852 assume !(1 == ~currentHeading~0); 13519#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 11655#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 11656#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 14035#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 14034#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 14033#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 14028#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 14026#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 11679#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 11680#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 13764#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 13765#L1637-2 [2024-11-20 22:43:52,310 INFO L747 eck$LassoCheckResult]: Loop: 13765#L1637-2 assume !false; 11785#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 11786#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 12889#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 12890#L1645 assume 1 != cleanup_~tmp___0~6#1; 13210#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 13211#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 13971#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 11856#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 11682#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 11683#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 13702#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 13703#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 13939#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 13938#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 13937#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 12457#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 12125#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 12454#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 13693#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 13880#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 13656#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 12841#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 12842#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 13587#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 13194#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 13195#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 12491#L852-3 assume !(1 == ~currentHeading~0); 12492#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 13779#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13780#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 13982#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 13981#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 13980#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 13979#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 13978#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 13727#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 12409#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 13778#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 13765#L1637-2 [2024-11-20 22:43:52,311 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:52,311 INFO L85 PathProgramCache]: Analyzing trace with hash -1526609697, now seen corresponding path program 1 times [2024-11-20 22:43:52,311 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:52,311 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1518819730] [2024-11-20 22:43:52,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:52,312 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:52,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:52,387 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:52,388 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:52,388 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1518819730] [2024-11-20 22:43:52,388 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1518819730] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:52,388 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:52,388 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:43:52,389 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1998045612] [2024-11-20 22:43:52,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:52,389 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:43:52,390 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:52,390 INFO L85 PathProgramCache]: Analyzing trace with hash -470143295, now seen corresponding path program 1 times [2024-11-20 22:43:52,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:52,390 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1672427731] [2024-11-20 22:43:52,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:52,391 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:52,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:52,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:52,445 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:52,445 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1672427731] [2024-11-20 22:43:52,445 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1672427731] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:52,445 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:52,445 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:43:52,446 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [840149922] [2024-11-20 22:43:52,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:52,446 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:43:52,446 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:43:52,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:43:52,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:43:52,447 INFO L87 Difference]: Start difference. First operand 4448 states and 8364 transitions. cyclomatic complexity: 3917 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:53,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:43:53,919 INFO L93 Difference]: Finished difference Result 7832 states and 14709 transitions. [2024-11-20 22:43:53,919 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 7832 states and 14709 transitions. [2024-11-20 22:43:53,963 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3928 [2024-11-20 22:43:54,004 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 7832 states to 7832 states and 14709 transitions. [2024-11-20 22:43:54,005 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 7832 [2024-11-20 22:43:54,013 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 7832 [2024-11-20 22:43:54,013 INFO L73 IsDeterministic]: Start isDeterministic. Operand 7832 states and 14709 transitions. [2024-11-20 22:43:54,023 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:43:54,024 INFO L218 hiAutomatonCegarLoop]: Abstraction has 7832 states and 14709 transitions. [2024-11-20 22:43:54,030 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7832 states and 14709 transitions. [2024-11-20 22:43:54,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7832 to 7814. [2024-11-20 22:43:54,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7814 states, 7814 states have (on average 1.8785513181469158) internal successors, (14679), 7813 states have internal predecessors, (14679), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:54,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7814 states to 7814 states and 14679 transitions. [2024-11-20 22:43:54,163 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7814 states and 14679 transitions. [2024-11-20 22:43:54,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-20 22:43:54,164 INFO L425 stractBuchiCegarLoop]: Abstraction has 7814 states and 14679 transitions. [2024-11-20 22:43:54,164 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-20 22:43:54,165 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7814 states and 14679 transitions. [2024-11-20 22:43:54,197 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3919 [2024-11-20 22:43:54,198 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:43:54,198 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:43:54,201 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:54,201 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:54,201 INFO L745 eck$LassoCheckResult]: Stem: 24039#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 24040#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 25166#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 24690#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 24691#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 24493#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 24494#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 25747#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 24952#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 24064#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 24065#L2208 assume 0 == initPersonOnFloor_~floor#1; 26030#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 23820#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 24363#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 25358#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 25857#L2000 assume !(0 == callOnFloor_~floorID#1); 25859#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 24411#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 24412#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24487#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 24084#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 23722#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 24298#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 24299#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 26061#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 26062#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 24304#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 24305#L2000-2 assume !(0 == callOnFloor_~floorID#1); 25677#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 24592#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 24593#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24925#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 24926#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 29533#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 26074#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 26059#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 24405#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 25113#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 25114#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 31372#L1034 assume !(0 != timeShift_~tmp___9~2#1); 25781#L1125 assume !(1 == ~doorState~0); 23826#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 23827#L476 assume !(1 == stopRequestedInDirection_~dir#1); 25724#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 23780#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 23939#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 23941#L852 assume !(1 == ~currentHeading~0); 31467#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 23947#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23948#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26254#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 26252#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 26250#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 26246#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 26239#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 26222#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 26210#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 26208#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 26206#L1637-2 [2024-11-20 22:43:54,202 INFO L747 eck$LassoCheckResult]: Loop: 26206#L1637-2 assume !false; 26205#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 26204#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 26203#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 26202#L1645 assume 1 != cleanup_~tmp___0~6#1; 26201#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 26200#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 26188#L1936-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 26174#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 26166#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 26157#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 26156#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 26155#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 26154#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 26153#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 26151#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 26149#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 26143#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 26140#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 26130#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 26129#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 26128#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 26127#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 26108#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 26094#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 26083#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 26081#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 26082#L852-3 assume !(1 == ~currentHeading~0); 31464#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24221#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 25993#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26253#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 26251#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 26249#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 26244#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 26237#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 26216#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 26209#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 26207#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 26206#L1637-2 [2024-11-20 22:43:54,202 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:54,203 INFO L85 PathProgramCache]: Analyzing trace with hash 398565134, now seen corresponding path program 1 times [2024-11-20 22:43:54,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:54,203 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2056449991] [2024-11-20 22:43:54,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:54,203 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:54,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:54,268 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:54,269 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:54,269 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2056449991] [2024-11-20 22:43:54,269 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2056449991] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:54,269 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:54,269 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:43:54,270 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1419383196] [2024-11-20 22:43:54,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:54,270 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:43:54,270 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:54,270 INFO L85 PathProgramCache]: Analyzing trace with hash -320049485, now seen corresponding path program 1 times [2024-11-20 22:43:54,271 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:54,271 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [815549145] [2024-11-20 22:43:54,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:54,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:54,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:54,296 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:54,297 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:54,297 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [815549145] [2024-11-20 22:43:54,297 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [815549145] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:54,297 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:54,297 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:43:54,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1190138088] [2024-11-20 22:43:54,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:54,298 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:43:54,298 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:43:54,299 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:43:54,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:43:54,299 INFO L87 Difference]: Start difference. First operand 7814 states and 14679 transitions. cyclomatic complexity: 6866 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:54,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:43:54,844 INFO L93 Difference]: Finished difference Result 7660 states and 14363 transitions. [2024-11-20 22:43:54,844 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 7660 states and 14363 transitions. [2024-11-20 22:43:54,886 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3797 [2024-11-20 22:43:54,933 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 7660 states to 7660 states and 14363 transitions. [2024-11-20 22:43:54,933 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 7660 [2024-11-20 22:43:54,942 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 7660 [2024-11-20 22:43:54,943 INFO L73 IsDeterministic]: Start isDeterministic. Operand 7660 states and 14363 transitions. [2024-11-20 22:43:54,955 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:43:54,955 INFO L218 hiAutomatonCegarLoop]: Abstraction has 7660 states and 14363 transitions. [2024-11-20 22:43:54,963 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7660 states and 14363 transitions. [2024-11-20 22:43:55,059 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7660 to 7660. [2024-11-20 22:43:55,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7660 states, 7660 states have (on average 1.875065274151436) internal successors, (14363), 7659 states have internal predecessors, (14363), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:55,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7660 states to 7660 states and 14363 transitions. [2024-11-20 22:43:55,093 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7660 states and 14363 transitions. [2024-11-20 22:43:55,093 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:43:55,094 INFO L425 stractBuchiCegarLoop]: Abstraction has 7660 states and 14363 transitions. [2024-11-20 22:43:55,094 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-20 22:43:55,094 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7660 states and 14363 transitions. [2024-11-20 22:43:55,121 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3797 [2024-11-20 22:43:55,122 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:43:55,122 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:43:55,124 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:55,124 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:55,124 INFO L745 eck$LassoCheckResult]: Stem: 39510#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 39511#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 40592#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 40136#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 40137#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 39942#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 39943#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 41153#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 40386#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 39535#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 39536#L2208 assume 0 == initPersonOnFloor_~floor#1; 41397#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39301#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 39815#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 40771#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 41250#L2000 assume !(0 == callOnFloor_~floorID#1); 41251#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 40112#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 42291#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 42290#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 42286#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 42283#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 42282#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 42251#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 42247#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 42245#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 42241#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 42240#L2000-2 assume !(0 == callOnFloor_~floorID#1); 42239#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 42235#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 42234#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 42233#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 42231#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 42232#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 43538#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 43536#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 43532#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 43530#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 43529#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 43527#L1034 assume !(0 != timeShift_~tmp___9~2#1); 43526#L1125 assume !(1 == ~doorState~0); 43512#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 43508#L476 assume !(1 == stopRequestedInDirection_~dir#1); 41909#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 41899#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 41896#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 41807#L852 assume !(1 == ~currentHeading~0); 41710#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 41691#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41681#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 41676#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 41670#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 41662#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 41661#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 41660#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 41638#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 41636#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 41635#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 41633#L1637-2 [2024-11-20 22:43:55,125 INFO L747 eck$LassoCheckResult]: Loop: 41633#L1637-2 assume !false; 41632#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 41631#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 41630#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 41629#L1645 assume 1 != cleanup_~tmp___0~6#1; 41628#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 41627#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 41622#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 41607#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 41603#L384 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 41592#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 41591#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 41590#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 41589#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 41588#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 41587#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 41577#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 41571#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 41567#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 41564#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 41560#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 41558#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 41557#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 41534#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 41519#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 41508#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 41506#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 41507#L852-3 assume !(1 == ~currentHeading~0); 42883#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 41849#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 41711#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 41692#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 41684#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 41677#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 41674#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 41668#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 41654#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 41637#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 41634#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 41633#L1637-2 [2024-11-20 22:43:55,126 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:55,126 INFO L85 PathProgramCache]: Analyzing trace with hash 398565134, now seen corresponding path program 2 times [2024-11-20 22:43:55,126 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:55,126 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1397359520] [2024-11-20 22:43:55,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:55,127 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:55,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:55,229 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:55,229 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:55,229 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1397359520] [2024-11-20 22:43:55,230 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1397359520] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:55,230 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:55,230 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:43:55,230 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496891187] [2024-11-20 22:43:55,230 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:55,231 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:43:55,231 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:55,231 INFO L85 PathProgramCache]: Analyzing trace with hash 2025650078, now seen corresponding path program 1 times [2024-11-20 22:43:55,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:55,232 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1895601067] [2024-11-20 22:43:55,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:55,232 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:55,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:55,280 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:55,281 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:55,281 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1895601067] [2024-11-20 22:43:55,281 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1895601067] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:55,281 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:55,281 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:43:55,282 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [277680005] [2024-11-20 22:43:55,282 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:55,282 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:43:55,282 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:43:55,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:43:55,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:43:55,283 INFO L87 Difference]: Start difference. First operand 7660 states and 14363 transitions. cyclomatic complexity: 6704 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:55,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:43:55,561 INFO L93 Difference]: Finished difference Result 13903 states and 26055 transitions. [2024-11-20 22:43:55,561 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13903 states and 26055 transitions. [2024-11-20 22:43:55,648 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7532 [2024-11-20 22:43:55,709 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13903 states to 13903 states and 26055 transitions. [2024-11-20 22:43:55,710 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13903 [2024-11-20 22:43:55,729 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13903 [2024-11-20 22:43:55,730 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13903 states and 26055 transitions. [2024-11-20 22:43:55,751 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:43:55,752 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13903 states and 26055 transitions. [2024-11-20 22:43:55,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13903 states and 26055 transitions. [2024-11-20 22:43:55,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13903 to 13903. [2024-11-20 22:43:55,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13903 states, 13903 states have (on average 1.8740559591455082) internal successors, (26055), 13902 states have internal predecessors, (26055), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:56,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13903 states to 13903 states and 26055 transitions. [2024-11-20 22:43:56,003 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13903 states and 26055 transitions. [2024-11-20 22:43:56,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:43:56,006 INFO L425 stractBuchiCegarLoop]: Abstraction has 13903 states and 26055 transitions. [2024-11-20 22:43:56,006 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-20 22:43:56,006 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13903 states and 26055 transitions. [2024-11-20 22:43:56,095 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7532 [2024-11-20 22:43:56,095 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:43:56,095 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:43:56,099 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:56,099 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:56,100 INFO L745 eck$LassoCheckResult]: Stem: 61084#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 61085#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 62185#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 61719#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 61720#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 61528#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 61529#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 62764#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 61977#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 61111#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 61112#L2208 assume 0 == initPersonOnFloor_~floor#1; 63047#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 60875#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 61395#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 62365#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 62873#L2000 assume !(0 == callOnFloor_~floorID#1); 62875#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 61447#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 61448#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 61522#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 61126#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 60776#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 61456#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 61876#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 60962#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 60980#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 60981#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 61340#L2000-2 assume !(0 == callOnFloor_~floorID#1); 62045#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 64356#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 64355#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 64354#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 64353#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 64352#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 64351#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 64349#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 64314#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 64311#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 64307#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 64304#L1034 assume !(0 != timeShift_~tmp___9~2#1); 64303#L1125 assume !(1 == ~doorState~0); 64302#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 64300#L476 assume !(1 == stopRequestedInDirection_~dir#1); 63791#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 63785#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 63780#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 63777#L852 assume !(1 == ~currentHeading~0); 63775#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 63771#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 63768#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 63764#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 63763#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 63762#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 63761#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 63758#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 63129#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 63115#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 63116#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 63635#L1637-2 [2024-11-20 22:43:56,100 INFO L747 eck$LassoCheckResult]: Loop: 63635#L1637-2 assume !false; 63634#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 63633#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 63632#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 63631#L1645 assume 1 != cleanup_~tmp___0~6#1; 63630#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 63629#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 63102#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 63103#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 63097#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 63099#L1932-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 63391#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 63389#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 63378#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 63377#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 63376#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 63374#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 63373#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 63372#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 63371#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 63366#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 63364#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 63359#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 63356#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 63355#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 63354#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 63352#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 63220#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 63206#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 63196#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 63188#L852-3 assume !(1 == ~currentHeading~0); 63179#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 63175#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 63170#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 63171#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 63919#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 63916#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 63917#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 63918#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 63123#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 63118#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 63636#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 63635#L1637-2 [2024-11-20 22:43:56,101 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:56,101 INFO L85 PathProgramCache]: Analyzing trace with hash 398565134, now seen corresponding path program 3 times [2024-11-20 22:43:56,101 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:56,102 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1580375361] [2024-11-20 22:43:56,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:56,102 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:56,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:56,176 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:56,177 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:56,177 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1580375361] [2024-11-20 22:43:56,179 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1580375361] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:56,179 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:56,179 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:43:56,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1529233383] [2024-11-20 22:43:56,179 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:56,180 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:43:56,180 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:56,180 INFO L85 PathProgramCache]: Analyzing trace with hash 96644810, now seen corresponding path program 1 times [2024-11-20 22:43:56,180 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:56,180 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694149767] [2024-11-20 22:43:56,181 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:56,181 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:56,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:56,237 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:56,238 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:56,238 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694149767] [2024-11-20 22:43:56,238 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694149767] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:56,239 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:56,239 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:43:56,240 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1539746074] [2024-11-20 22:43:56,240 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:56,240 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:43:56,240 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:43:56,240 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:43:56,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:43:56,241 INFO L87 Difference]: Start difference. First operand 13903 states and 26055 transitions. cyclomatic complexity: 12153 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:57,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:43:57,111 INFO L93 Difference]: Finished difference Result 13903 states and 25911 transitions. [2024-11-20 22:43:57,111 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13903 states and 25911 transitions. [2024-11-20 22:43:57,166 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7532 [2024-11-20 22:43:57,214 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13903 states to 13903 states and 25911 transitions. [2024-11-20 22:43:57,214 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13903 [2024-11-20 22:43:57,239 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13903 [2024-11-20 22:43:57,240 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13903 states and 25911 transitions. [2024-11-20 22:43:57,255 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:43:57,255 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13903 states and 25911 transitions. [2024-11-20 22:43:57,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13903 states and 25911 transitions. [2024-11-20 22:43:57,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13903 to 13903. [2024-11-20 22:43:57,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13903 states, 13903 states have (on average 1.8636984823419407) internal successors, (25911), 13902 states have internal predecessors, (25911), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:57,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13903 states to 13903 states and 25911 transitions. [2024-11-20 22:43:57,435 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13903 states and 25911 transitions. [2024-11-20 22:43:57,435 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:43:57,437 INFO L425 stractBuchiCegarLoop]: Abstraction has 13903 states and 25911 transitions. [2024-11-20 22:43:57,437 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-20 22:43:57,437 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13903 states and 25911 transitions. [2024-11-20 22:43:57,481 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7532 [2024-11-20 22:43:57,481 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:43:57,481 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:43:57,547 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:57,548 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:57,548 INFO L745 eck$LassoCheckResult]: Stem: 88897#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 88898#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 90013#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 89540#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 89541#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 89340#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 89341#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 90613#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 89802#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 88924#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 88925#L2208 assume 0 == initPersonOnFloor_~floor#1; 90897#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 88691#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 89208#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 90208#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 90718#L2000 assume !(0 == callOnFloor_~floorID#1); 90719#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 89519#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 92940#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 92939#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 92933#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 92930#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 89143#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 89144#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 91619#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 91617#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 91613#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 91612#L2000-2 assume !(0 == callOnFloor_~floorID#1); 91611#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 91607#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 91606#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 91605#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 91603#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 91602#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 91601#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 91599#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 91595#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 91589#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 91587#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 91585#L1034 assume !(0 != timeShift_~tmp___9~2#1); 91584#L1125 assume !(1 == ~doorState~0); 91582#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 91579#L476 assume !(1 == stopRequestedInDirection_~dir#1); 91533#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 91527#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 91524#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 91520#L852 assume !(1 == ~currentHeading~0); 91516#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 91512#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 91511#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 91507#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 91506#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 91505#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 91503#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 91504#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 90983#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 90971#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 90968#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 90966#L1637-2 [2024-11-20 22:43:57,549 INFO L747 eck$LassoCheckResult]: Loop: 90966#L1637-2 assume !false; 90965#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 90964#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 90963#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 90962#L1645 assume 1 != cleanup_~tmp___0~6#1; 90961#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 90960#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 90959#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 90957#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 90955#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 90601#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 90602#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 90656#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 90657#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 91445#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 91444#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 91443#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 91434#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 91431#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 91428#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 91426#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 91416#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 91408#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 91398#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 91211#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 91210#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 91209#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 91207#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 91075#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 91061#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 91051#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 91043#L852-3 assume !(1 == ~currentHeading~0); 91034#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 91030#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 91025#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 91026#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 91011#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 91012#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 91665#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 91003#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 91004#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 91646#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 90967#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 90966#L1637-2 [2024-11-20 22:43:57,549 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:57,549 INFO L85 PathProgramCache]: Analyzing trace with hash 398565134, now seen corresponding path program 4 times [2024-11-20 22:43:57,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:57,550 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1592732942] [2024-11-20 22:43:57,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:57,550 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:57,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:57,617 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:57,618 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:57,618 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1592732942] [2024-11-20 22:43:57,618 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1592732942] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:57,618 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:57,618 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:43:57,619 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1460253417] [2024-11-20 22:43:57,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:57,619 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:43:57,619 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:57,619 INFO L85 PathProgramCache]: Analyzing trace with hash -1903728042, now seen corresponding path program 1 times [2024-11-20 22:43:57,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:57,620 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1355277511] [2024-11-20 22:43:57,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:57,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:57,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:57,658 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:57,659 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:57,659 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1355277511] [2024-11-20 22:43:57,659 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1355277511] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:57,659 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:57,659 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:43:57,660 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684187695] [2024-11-20 22:43:57,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:57,660 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:43:57,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:43:57,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:43:57,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:43:57,661 INFO L87 Difference]: Start difference. First operand 13903 states and 25911 transitions. cyclomatic complexity: 12009 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:57,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:43:57,863 INFO L93 Difference]: Finished difference Result 13932 states and 25940 transitions. [2024-11-20 22:43:57,863 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13932 states and 25940 transitions. [2024-11-20 22:43:57,923 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7550 [2024-11-20 22:43:57,971 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13932 states to 13932 states and 25940 transitions. [2024-11-20 22:43:57,972 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13932 [2024-11-20 22:43:58,000 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13932 [2024-11-20 22:43:58,000 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13932 states and 25940 transitions. [2024-11-20 22:43:58,016 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:43:58,018 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13932 states and 25940 transitions. [2024-11-20 22:43:58,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13932 states and 25940 transitions. [2024-11-20 22:43:58,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13932 to 13921. [2024-11-20 22:43:58,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13921 states, 13921 states have (on average 1.8625817110839737) internal successors, (25929), 13920 states have internal predecessors, (25929), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:58,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13921 states to 13921 states and 25929 transitions. [2024-11-20 22:43:58,204 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13921 states and 25929 transitions. [2024-11-20 22:43:58,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:43:58,205 INFO L425 stractBuchiCegarLoop]: Abstraction has 13921 states and 25929 transitions. [2024-11-20 22:43:58,206 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-20 22:43:58,206 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13921 states and 25929 transitions. [2024-11-20 22:43:58,250 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7544 [2024-11-20 22:43:58,250 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:43:58,251 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:43:58,253 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:58,253 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:43:58,253 INFO L745 eck$LassoCheckResult]: Stem: 116739#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 116740#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 117860#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 117391#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 117392#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 117187#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 117188#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 118451#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 117651#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 116767#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 116768#L2208 assume 0 == initPersonOnFloor_~floor#1; 118748#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 116533#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 117055#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 118049#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 118557#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 117106#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 117107#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 117181#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 116783#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 116434#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 116991#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 116992#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 116618#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 116636#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 116637#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 116997#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 117296#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 117297#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 117625#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 116817#L1932 assume !(0 == isFloorCalling_~floorID#1); 116542#L1936 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 116543#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 116578#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 117052#L289 assume !(0 == buttonForFloorIsPressed_~floorID#1); 118725#L293 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 117100#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 117808#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 117809#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 128219#L1034 assume !(0 != timeShift_~tmp___9~2#1); 118487#L1125 assume !(1 == ~doorState~0); 116534#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 116535#L476 assume !(1 == stopRequestedInDirection_~dir#1); 118431#L645 assume !(0 == ~currentFloorID~0); 119423#L651 assume !(~currentFloorID~0 > 0); 118472#$Ultimate##2164 assume ~currentFloorID~0 > 0; 119417#L668 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 119416#L669 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 118540#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 128850#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 117666#L852 assume !(1 == ~currentHeading~0); 117668#L862 assume !(0 == ~currentFloorID~0); 129997#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 129996#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 118293#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 118055#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 118056#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 116806#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 116807#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 116678#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 116679#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 118691#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 116857#L1637-2 [2024-11-20 22:43:58,254 INFO L747 eck$LassoCheckResult]: Loop: 116857#L1637-2 assume !false; 116779#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 116780#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 117853#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 117854#L1645 assume 1 != cleanup_~tmp___0~6#1; 118169#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 118170#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 128970#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 127276#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 127270#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 127268#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 127267#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 127266#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 116584#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 116451#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 118119#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 129103#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 129108#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 129106#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 129104#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 129105#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 129283#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 129282#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 129280#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 129278#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 129279#L645-2 assume !(0 == ~currentFloorID~0); 130078#L651-2 assume !(~currentFloorID~0 > 0); 118800#$Ultimate##4524 assume ~currentFloorID~0 > 0; 130076#L668-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 118438#L669-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 116598#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 129240#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 129239#L852-3 assume !(1 == ~currentHeading~0); 116916#L862-9 assume !(0 == ~currentFloorID~0); 116917#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 118694#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 117983#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 117984#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 118059#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 118060#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 118760#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 118655#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 117401#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 118706#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 116857#L1637-2 [2024-11-20 22:43:58,255 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:58,255 INFO L85 PathProgramCache]: Analyzing trace with hash 995828991, now seen corresponding path program 1 times [2024-11-20 22:43:58,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:58,256 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [783400765] [2024-11-20 22:43:58,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:58,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:58,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:58,326 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:58,326 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:58,326 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [783400765] [2024-11-20 22:43:58,328 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [783400765] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:58,328 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:58,329 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:43:58,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1409508920] [2024-11-20 22:43:58,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:58,329 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:43:58,329 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:43:58,329 INFO L85 PathProgramCache]: Analyzing trace with hash -330281427, now seen corresponding path program 1 times [2024-11-20 22:43:58,330 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:43:58,330 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1481741197] [2024-11-20 22:43:58,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:43:58,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:43:58,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:43:58,462 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:43:58,463 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:43:58,463 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1481741197] [2024-11-20 22:43:58,464 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1481741197] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:43:58,466 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:43:58,466 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:43:58,467 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1935957754] [2024-11-20 22:43:58,467 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:43:58,467 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:43:58,467 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:43:58,467 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:43:58,468 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:43:58,468 INFO L87 Difference]: Start difference. First operand 13921 states and 25929 transitions. cyclomatic complexity: 12009 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:59,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:43:59,283 INFO L93 Difference]: Finished difference Result 20737 states and 38348 transitions. [2024-11-20 22:43:59,283 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20737 states and 38348 transitions. [2024-11-20 22:43:59,362 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11270 [2024-11-20 22:43:59,438 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20737 states to 20737 states and 38348 transitions. [2024-11-20 22:43:59,438 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20737 [2024-11-20 22:43:59,460 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20737 [2024-11-20 22:43:59,461 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20737 states and 38348 transitions. [2024-11-20 22:43:59,482 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:43:59,483 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20737 states and 38348 transitions. [2024-11-20 22:43:59,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20737 states and 38348 transitions. [2024-11-20 22:43:59,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20737 to 20565. [2024-11-20 22:43:59,944 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20565 states, 20565 states have (on average 1.851300753707756) internal successors, (38072), 20564 states have internal predecessors, (38072), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:43:59,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20565 states to 20565 states and 38072 transitions. [2024-11-20 22:43:59,998 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20565 states and 38072 transitions. [2024-11-20 22:43:59,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:00,001 INFO L425 stractBuchiCegarLoop]: Abstraction has 20565 states and 38072 transitions. [2024-11-20 22:44:00,002 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-20 22:44:00,002 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20565 states and 38072 transitions. [2024-11-20 22:44:00,090 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11184 [2024-11-20 22:44:00,091 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:00,091 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:00,098 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:00,099 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:00,099 INFO L745 eck$LassoCheckResult]: Stem: 151401#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 151402#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 152529#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 152057#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 152058#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 151850#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 151851#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 153143#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 152318#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 151425#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151426#L2208 assume 0 == initPersonOnFloor_~floor#1; 153467#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 151196#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 151715#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 152722#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 153259#L2000 assume !(0 == callOnFloor_~floorID#1); 153261#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 151765#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 151766#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 151843#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 151844#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 151777#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151778#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 152216#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 151282#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 151302#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 151303#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 152384#L2000-2 assume !(0 == callOnFloor_~floorID#1); 152385#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 151957#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 151958#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 152290#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 152291#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 153576#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 153574#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 153570#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 153571#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 158015#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 158014#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 158011#L1034 assume !(0 != timeShift_~tmp___9~2#1); 158012#L1125 assume !(1 == ~doorState~0); 166935#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 166933#L476 assume !(1 == stopRequestedInDirection_~dir#1); 166934#L645 assume !(0 == ~currentFloorID~0); 168168#L651 assume !(~currentFloorID~0 > 0); 153531#$Ultimate##2164 assume ~currentFloorID~0 > 0; 153530#L668 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 153529#L669 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 153240#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 169499#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 152330#L852 assume !(1 == ~currentHeading~0); 152331#L862 assume !(0 == ~currentFloorID~0); 152312#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152603#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 152604#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 169245#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 169244#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 169242#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 169243#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 169413#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 169172#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 169173#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 169164#L1637-2 [2024-11-20 22:44:00,100 INFO L747 eck$LassoCheckResult]: Loop: 169164#L1637-2 assume !false; 169165#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 169157#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 169158#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 169153#L1645 assume 1 != cleanup_~tmp___0~6#1; 169154#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 159241#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 159242#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 169998#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 169999#L384 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 153821#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 170767#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 170766#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 170765#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 169953#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 169508#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 169509#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 169514#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 169904#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 169511#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 169512#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 170171#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 170166#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 170165#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 170163#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 170164#L645-2 assume !(0 == ~currentFloorID~0); 169983#L651-2 assume !(~currentFloorID~0 > 0); 169979#$Ultimate##4524 assume ~currentFloorID~0 > 0; 169978#L668-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 153129#L669-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 151260#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 170181#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 170176#L852-3 assume !(1 == ~currentHeading~0); 170110#L862-9 assume !(0 == ~currentFloorID~0); 153426#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 153411#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 152662#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 169439#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 169437#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 169438#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 169435#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 169436#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 169414#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 169415#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 169164#L1637-2 [2024-11-20 22:44:00,100 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:00,101 INFO L85 PathProgramCache]: Analyzing trace with hash -1743768199, now seen corresponding path program 1 times [2024-11-20 22:44:00,101 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:00,101 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [984214876] [2024-11-20 22:44:00,101 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:00,101 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:00,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:00,324 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:00,324 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:00,324 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [984214876] [2024-11-20 22:44:00,325 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [984214876] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:00,325 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:00,325 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:00,325 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1980328609] [2024-11-20 22:44:00,325 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:00,326 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:00,326 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:00,326 INFO L85 PathProgramCache]: Analyzing trace with hash -1020688528, now seen corresponding path program 1 times [2024-11-20 22:44:00,326 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:00,326 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [944345509] [2024-11-20 22:44:00,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:00,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:00,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:00,380 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:00,381 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:00,381 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [944345509] [2024-11-20 22:44:00,381 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [944345509] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:00,381 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:00,381 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:00,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [73300223] [2024-11-20 22:44:00,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:00,381 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:00,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:00,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:44:00,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:44:00,382 INFO L87 Difference]: Start difference. First operand 20565 states and 38072 transitions. cyclomatic complexity: 17508 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:01,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:01,257 INFO L93 Difference]: Finished difference Result 14200 states and 26169 transitions. [2024-11-20 22:44:01,257 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14200 states and 26169 transitions. [2024-11-20 22:44:01,326 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11237 [2024-11-20 22:44:01,481 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14200 states to 14200 states and 26169 transitions. [2024-11-20 22:44:01,485 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14200 [2024-11-20 22:44:01,497 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14200 [2024-11-20 22:44:01,497 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14200 states and 26169 transitions. [2024-11-20 22:44:01,507 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:01,507 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14200 states and 26169 transitions. [2024-11-20 22:44:01,514 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14200 states and 26169 transitions. [2024-11-20 22:44:01,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14200 to 14191. [2024-11-20 22:44:01,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14191 states, 14191 states have (on average 1.8429990839264323) internal successors, (26154), 14190 states have internal predecessors, (26154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:01,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14191 states to 14191 states and 26154 transitions. [2024-11-20 22:44:01,661 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14191 states and 26154 transitions. [2024-11-20 22:44:01,661 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-20 22:44:01,662 INFO L425 stractBuchiCegarLoop]: Abstraction has 14191 states and 26154 transitions. [2024-11-20 22:44:01,662 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-20 22:44:01,662 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14191 states and 26154 transitions. [2024-11-20 22:44:01,705 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11228 [2024-11-20 22:44:01,706 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:01,706 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:01,707 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:01,707 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:01,708 INFO L745 eck$LassoCheckResult]: Stem: 186152#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 186153#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 187189#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 186745#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 186746#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 186567#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 186568#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 187767#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 186987#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 186176#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 186177#L2208 assume 0 == initPersonOnFloor_~floor#1; 188034#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 185963#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 186451#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 187374#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 187867#L2000 assume !(0 == callOnFloor_~floorID#1); 187868#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 186727#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 188145#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 188144#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 188138#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 188135#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 188133#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 188105#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 188101#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 188099#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 188095#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 188094#L2000-2 assume !(0 == callOnFloor_~floorID#1); 188093#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 188089#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 188088#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 188087#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 188086#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 188085#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 188084#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 188073#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 187317#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 187137#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 187139#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 188082#L1034 assume !(0 != timeShift_~tmp___9~2#1); 187801#L1125 assume !(1 == ~doorState~0); 185964#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 185965#L476 assume !(1 == stopRequestedInDirection_~dir#1); 187743#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 187234#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 186062#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 186063#L907 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 187585#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 187528#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 186055#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 186056#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 187578#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 186210#L852-2 assume !(1 == ~currentHeading~0); 186211#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 186311#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 187091#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 187266#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 187381#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 187382#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 186216#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 186217#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 186093#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 186094#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 187216#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 187991#L1637-2 [2024-11-20 22:44:01,708 INFO L747 eck$LassoCheckResult]: Loop: 187991#L1637-2 assume !false; 196268#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 196265#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 196262#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 196259#L1645 assume 1 != cleanup_~tmp___0~6#1; 196251#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 196252#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 196243#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 196244#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 196250#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 197519#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 197517#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 197514#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 197513#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 197502#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 197501#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 197500#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 197495#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 186003#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 197493#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 197492#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 197491#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 197489#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 197488#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 197487#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 197482#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 197480#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 197478#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 197479#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 197448#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 197601#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 197433#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 197595#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 197594#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 196711#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 196699#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 196697#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 196695#L852-5 assume !(1 == ~currentHeading~0); 196689#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 196614#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 196608#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 196605#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 196604#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 196390#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 196391#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 196384#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 196294#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 196276#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 196273#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 187991#L1637-2 [2024-11-20 22:44:01,709 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:01,709 INFO L85 PathProgramCache]: Analyzing trace with hash -2087993221, now seen corresponding path program 1 times [2024-11-20 22:44:01,709 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:01,709 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2020422574] [2024-11-20 22:44:01,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:01,710 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:01,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:01,769 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:01,769 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:01,769 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2020422574] [2024-11-20 22:44:01,769 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2020422574] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:01,770 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:01,770 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:01,770 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1718630934] [2024-11-20 22:44:01,770 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:01,770 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:01,770 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:01,771 INFO L85 PathProgramCache]: Analyzing trace with hash 177114241, now seen corresponding path program 1 times [2024-11-20 22:44:01,771 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:01,771 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1083304334] [2024-11-20 22:44:01,771 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:01,771 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:01,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:01,813 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:01,813 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:01,814 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1083304334] [2024-11-20 22:44:01,814 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1083304334] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:01,814 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:01,814 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:01,814 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2130766588] [2024-11-20 22:44:01,814 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:01,814 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:01,814 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:01,815 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:44:01,815 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:44:01,815 INFO L87 Difference]: Start difference. First operand 14191 states and 26154 transitions. cyclomatic complexity: 11964 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:02,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:02,022 INFO L93 Difference]: Finished difference Result 14217 states and 26180 transitions. [2024-11-20 22:44:02,022 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14217 states and 26180 transitions. [2024-11-20 22:44:02,074 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11251 [2024-11-20 22:44:02,119 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14217 states to 14217 states and 26180 transitions. [2024-11-20 22:44:02,119 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14217 [2024-11-20 22:44:02,131 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14217 [2024-11-20 22:44:02,132 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14217 states and 26180 transitions. [2024-11-20 22:44:02,149 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:02,150 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14217 states and 26180 transitions. [2024-11-20 22:44:02,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14217 states and 26180 transitions. [2024-11-20 22:44:02,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14217 to 14211. [2024-11-20 22:44:02,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14211 states, 14211 states have (on average 1.8418126803180634) internal successors, (26174), 14210 states have internal predecessors, (26174), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:02,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14211 states to 14211 states and 26174 transitions. [2024-11-20 22:44:02,312 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14211 states and 26174 transitions. [2024-11-20 22:44:02,312 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:02,313 INFO L425 stractBuchiCegarLoop]: Abstraction has 14211 states and 26174 transitions. [2024-11-20 22:44:02,313 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-20 22:44:02,314 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14211 states and 26174 transitions. [2024-11-20 22:44:02,353 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11246 [2024-11-20 22:44:02,354 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:02,354 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:02,355 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:02,355 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:02,356 INFO L745 eck$LassoCheckResult]: Stem: 214570#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 214571#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 215585#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 215152#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 215153#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 214974#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 214975#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 216147#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 215392#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 214595#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 214596#L2208 assume 0 == initPersonOnFloor_~floor#1; 216406#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 214381#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 214861#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 215768#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 216248#L2000 assume !(0 == callOnFloor_~floorID#1); 216250#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 214903#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 214904#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 216511#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 216507#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 216504#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 216500#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 216472#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 216468#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 216466#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 216462#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 216461#L2000-2 assume !(0 == callOnFloor_~floorID#1); 216460#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 216456#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 216455#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 216454#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 216453#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 216452#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 216451#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 216440#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 215714#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 215536#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 215537#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 216449#L1034 assume !(0 != timeShift_~tmp___9~2#1); 216179#L1125 assume !(1 == ~doorState~0); 214382#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 214383#L476 assume !(1 == stopRequestedInDirection_~dir#1); 216123#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 215631#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 214480#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 214481#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 216443#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 216450#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 214473#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 214474#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 215966#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 214628#L852-2 assume !(1 == ~currentHeading~0); 214629#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 214725#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 215493#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 215663#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 222584#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 222583#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 222575#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 216820#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 216712#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 216700#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 216698#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 216696#L1637-2 [2024-11-20 22:44:02,356 INFO L747 eck$LassoCheckResult]: Loop: 216696#L1637-2 assume !false; 216695#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 216694#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 216693#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 216692#L1645 assume 1 != cleanup_~tmp___0~6#1; 216691#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 216690#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 216689#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 216687#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 216685#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 216683#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 216684#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 216664#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 216665#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 217057#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 217056#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 217055#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 217054#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 216645#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 216640#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 216628#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 216627#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 216625#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 216624#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 216622#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 216621#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 216620#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 216604#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 216591#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 216581#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 216568#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 216566#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 216565#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 216546#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 216537#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 216518#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 216516#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 216514#L852-5 assume !(1 == ~currentHeading~0); 216512#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 216513#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 216737#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 216733#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 216731#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 216729#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 216728#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 216727#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 216706#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 216699#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 216697#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 216696#L1637-2 [2024-11-20 22:44:02,357 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:02,357 INFO L85 PathProgramCache]: Analyzing trace with hash 212829369, now seen corresponding path program 1 times [2024-11-20 22:44:02,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:02,357 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [814273564] [2024-11-20 22:44:02,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:02,358 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:02,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:02,522 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:02,522 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:02,522 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [814273564] [2024-11-20 22:44:02,522 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [814273564] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:02,522 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:02,522 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:02,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1526140582] [2024-11-20 22:44:02,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:02,523 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:02,523 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:02,523 INFO L85 PathProgramCache]: Analyzing trace with hash -1817030465, now seen corresponding path program 1 times [2024-11-20 22:44:02,523 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:02,523 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [993444050] [2024-11-20 22:44:02,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:02,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:02,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:02,647 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:02,648 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:02,648 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [993444050] [2024-11-20 22:44:02,648 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [993444050] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:02,648 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:02,648 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:02,649 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [942635474] [2024-11-20 22:44:02,649 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:02,649 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:02,649 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:02,650 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-20 22:44:02,651 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2024-11-20 22:44:02,651 INFO L87 Difference]: Start difference. First operand 14211 states and 26174 transitions. cyclomatic complexity: 11964 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:03,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:03,716 INFO L93 Difference]: Finished difference Result 21293 states and 39263 transitions. [2024-11-20 22:44:03,716 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21293 states and 39263 transitions. [2024-11-20 22:44:03,896 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18310 [2024-11-20 22:44:03,955 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21293 states to 21293 states and 39263 transitions. [2024-11-20 22:44:03,956 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21293 [2024-11-20 22:44:03,977 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21293 [2024-11-20 22:44:03,977 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21293 states and 39263 transitions. [2024-11-20 22:44:04,006 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:04,006 INFO L218 hiAutomatonCegarLoop]: Abstraction has 21293 states and 39263 transitions. [2024-11-20 22:44:04,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21293 states and 39263 transitions. [2024-11-20 22:44:04,183 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21293 to 20472. [2024-11-20 22:44:04,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20472 states, 20472 states have (on average 1.8509183274716685) internal successors, (37892), 20471 states have internal predecessors, (37892), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:04,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20472 states to 20472 states and 37892 transitions. [2024-11-20 22:44:04,237 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20472 states and 37892 transitions. [2024-11-20 22:44:04,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-20 22:44:04,238 INFO L425 stractBuchiCegarLoop]: Abstraction has 20472 states and 37892 transitions. [2024-11-20 22:44:04,238 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-20 22:44:04,238 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20472 states and 37892 transitions. [2024-11-20 22:44:04,287 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17510 [2024-11-20 22:44:04,287 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:04,287 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:04,294 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:04,294 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:04,294 INFO L745 eck$LassoCheckResult]: Stem: 250095#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 250096#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 251128#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 250685#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 250686#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 250504#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 250505#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 251713#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 250925#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 250117#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 250118#L2208 assume 0 == initPersonOnFloor_~floor#1; 251994#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 249902#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 250388#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 251310#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 251815#L2000 assume !(0 == callOnFloor_~floorID#1); 251816#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 250664#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 252112#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 252111#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 252107#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 252104#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 252100#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 252072#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 252068#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 252066#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 252062#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 252061#L2000-2 assume !(0 == callOnFloor_~floorID#1); 252060#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 252056#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 252055#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 252054#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 252053#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 252052#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 252051#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 252031#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 251254#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 251076#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 251077#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 252049#L1034 assume !(0 != timeShift_~tmp___9~2#1); 251746#L1125 assume !(1 == ~doorState~0); 249903#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 249904#L476 assume !(1 == stopRequestedInDirection_~dir#1); 251688#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 251169#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 250003#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 250004#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 252033#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 252050#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 249997#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 249998#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 251518#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 250150#L852-2 assume !(1 == ~currentHeading~0); 250151#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 250248#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 251029#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 251201#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 251316#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 251317#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 251569#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 258686#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 258690#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 258691#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 258610#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 258598#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 258596#L1637-2 [2024-11-20 22:44:04,295 INFO L747 eck$LassoCheckResult]: Loop: 258596#L1637-2 assume !false; 258595#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 258594#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 258593#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 258592#L1645 assume 1 != cleanup_~tmp___0~6#1; 258591#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 258590#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 258585#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 258583#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 258524#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 258508#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 258500#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 258442#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 252262#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 252263#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 260273#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 260272#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 260265#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 260260#L1034-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 260205#L1036-2 assume !(0 != ~persons_0~0); 260190#L1036-3 assume !(0 != ~persons_1~0); 259941#L1050-1 assume !(0 != ~persons_2~0); 259930#L1064-1 assume !(0 != ~persons_3~0); 259906#L1078-1 assume !(0 != ~persons_4~0); 259904#L1092-1 assume !(0 != ~persons_5~0); 259900#L1106-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~5#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259893#L2028-12 assume 0 == isPersonOnFloor_~floor#1; 259856#L2029-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259845#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret24#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret24#1;havoc processWaitingOnFloor_#t~ret24#1; 259839#L935-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 259836#L935-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259834#L2028-14 assume 0 == isPersonOnFloor_~floor#1; 259681#L2029-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259527#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret26#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret26#1;havoc processWaitingOnFloor_#t~ret26#1; 259184#L948-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 259181#L948-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259175#L2028-16 assume 0 == isPersonOnFloor_~floor#1; 259165#L2029-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259112#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret28#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret28#1;havoc processWaitingOnFloor_#t~ret28#1; 259109#L961-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 259105#L961-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259104#L2028-18 assume 0 == isPersonOnFloor_~floor#1; 259076#L2029-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259059#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret30#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret30#1;havoc processWaitingOnFloor_#t~ret30#1; 259057#L974-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 259055#L974-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259054#L2028-20 assume 0 == isPersonOnFloor_~floor#1; 259017#L2029-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259016#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret32#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret32#1;havoc processWaitingOnFloor_#t~ret32#1; 259014#L987-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 259015#L987-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259511#L2028-22 assume 0 == isPersonOnFloor_~floor#1; 259436#L2029-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259413#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 259411#L1000-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 259412#L1000-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 263353#L1967-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 250841#L1979-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 250885#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 250886#L243-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 251586#L255-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 251244#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 251245#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 251320#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 251321#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 251153#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 251154#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 250691#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 250692#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 258597#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 258596#L1637-2 [2024-11-20 22:44:04,295 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:04,296 INFO L85 PathProgramCache]: Analyzing trace with hash 316822787, now seen corresponding path program 1 times [2024-11-20 22:44:04,296 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:04,296 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [123657338] [2024-11-20 22:44:04,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:04,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:04,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:04,505 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:04,505 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:04,506 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [123657338] [2024-11-20 22:44:04,506 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [123657338] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:04,506 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:04,506 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:04,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [117884584] [2024-11-20 22:44:04,507 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:04,507 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:04,507 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:04,508 INFO L85 PathProgramCache]: Analyzing trace with hash -5900719, now seen corresponding path program 1 times [2024-11-20 22:44:04,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:04,508 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [983534116] [2024-11-20 22:44:04,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:04,508 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:04,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:04,571 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:04,571 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:04,571 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [983534116] [2024-11-20 22:44:04,571 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [983534116] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:04,571 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:04,571 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:04,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2143606003] [2024-11-20 22:44:04,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:04,572 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:04,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:04,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:44:04,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:44:04,573 INFO L87 Difference]: Start difference. First operand 20472 states and 37892 transitions. cyclomatic complexity: 17421 Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:04,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:04,669 INFO L93 Difference]: Finished difference Result 20472 states and 37886 transitions. [2024-11-20 22:44:04,669 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20472 states and 37886 transitions. [2024-11-20 22:44:04,758 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17510 [2024-11-20 22:44:04,824 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20472 states to 20472 states and 37886 transitions. [2024-11-20 22:44:04,825 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20472 [2024-11-20 22:44:04,844 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20472 [2024-11-20 22:44:04,845 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20472 states and 37886 transitions. [2024-11-20 22:44:04,862 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:04,863 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20472 states and 37886 transitions. [2024-11-20 22:44:04,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20472 states and 37886 transitions. [2024-11-20 22:44:05,208 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20472 to 20472. [2024-11-20 22:44:05,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20472 states, 20472 states have (on average 1.8506252442360298) internal successors, (37886), 20471 states have internal predecessors, (37886), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:05,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20472 states to 20472 states and 37886 transitions. [2024-11-20 22:44:05,258 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20472 states and 37886 transitions. [2024-11-20 22:44:05,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:44:05,258 INFO L425 stractBuchiCegarLoop]: Abstraction has 20472 states and 37886 transitions. [2024-11-20 22:44:05,259 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-20 22:44:05,259 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20472 states and 37886 transitions. [2024-11-20 22:44:05,306 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17510 [2024-11-20 22:44:05,306 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:05,306 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:05,312 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:05,312 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:05,312 INFO L745 eck$LassoCheckResult]: Stem: 291045#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 291046#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 292071#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 291631#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 291632#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 291452#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 291453#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 292636#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 291877#L3030 assume !(0 == getOrigin_~person#1); 291878#L3034 assume !(1 == getOrigin_~person#1); 292039#L3038 assume !(2 == getOrigin_~person#1); 291514#L3042 assume !(3 == getOrigin_~person#1); 291515#L3046 assume !(4 == getOrigin_~person#1); 292437#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 291069#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 291070#L2208 assume 0 == initPersonOnFloor_~floor#1; 292899#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 290855#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 291336#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 292245#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 292735#L2000 assume !(0 == callOnFloor_~floorID#1); 292736#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 291612#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 293011#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 293010#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 293006#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 293003#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 292999#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 292971#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 292967#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 292965#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 292961#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 292960#L2000-2 assume !(0 == callOnFloor_~floorID#1); 292959#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 292955#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 292954#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 292953#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 292952#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 292951#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 292950#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 292940#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 292194#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 292022#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 292024#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 292947#L1034 assume !(0 != timeShift_~tmp___9~2#1); 292668#L1125 assume !(1 == ~doorState~0); 290856#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 290857#L476 assume !(1 == stopRequestedInDirection_~dir#1); 292614#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 292113#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 290954#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 290955#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 292942#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 292949#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 290947#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 290948#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 292449#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 291102#L852-2 assume !(1 == ~currentHeading~0); 291103#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 291199#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 291979#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 292145#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 292252#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 292253#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 292499#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 299314#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 299319#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 299317#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 299292#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 299288#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 299284#L1637-2 [2024-11-20 22:44:05,313 INFO L747 eck$LassoCheckResult]: Loop: 299284#L1637-2 assume !false; 299281#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 299278#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 299275#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 299271#L1645 assume 1 != cleanup_~tmp___0~6#1; 299268#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 299261#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 299260#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 299259#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 298200#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 298199#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 298197#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 298195#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 293244#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 293245#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 306077#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 306076#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 306057#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 302081#L1034-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 302074#L1036-2 assume !(0 != ~persons_0~0); 302068#L1036-3 assume !(0 != ~persons_1~0); 302063#L1050-1 assume !(0 != ~persons_2~0); 302052#L1064-1 assume !(0 != ~persons_3~0); 302028#L1078-1 assume !(0 != ~persons_4~0); 302026#L1092-1 assume !(0 != ~persons_5~0); 302022#L1106-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~5#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 302021#L2028-12 assume 0 == isPersonOnFloor_~floor#1; 301996#L2029-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 301979#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret24#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret24#1;havoc processWaitingOnFloor_#t~ret24#1; 301977#L935-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 301975#L935-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 301974#L2028-14 assume 0 == isPersonOnFloor_~floor#1; 300366#L2029-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 300364#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret26#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret26#1;havoc processWaitingOnFloor_#t~ret26#1; 300359#L948-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 300356#L948-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 300355#L2028-16 assume 0 == isPersonOnFloor_~floor#1; 300102#L2029-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 300074#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret28#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret28#1;havoc processWaitingOnFloor_#t~ret28#1; 300072#L961-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 300070#L961-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 300069#L2028-18 assume 0 == isPersonOnFloor_~floor#1; 300046#L2029-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 300035#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret30#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret30#1;havoc processWaitingOnFloor_#t~ret30#1; 300033#L974-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 300034#L974-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 300309#L2028-20 assume 0 == isPersonOnFloor_~floor#1; 300274#L2029-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 300273#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret32#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret32#1;havoc processWaitingOnFloor_#t~ret32#1; 300269#L987-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 300267#L987-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 300266#L2028-22 assume 0 == isPersonOnFloor_~floor#1; 299661#L2029-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 299637#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 299634#L1000-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 299631#L1000-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 299488#L1967-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 299484#L1979-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 299482#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 299373#L243-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 299368#L255-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 299364#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 299363#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 299362#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 299352#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 299350#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 299351#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 299309#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 299291#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 299287#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 299284#L1637-2 [2024-11-20 22:44:05,313 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:05,314 INFO L85 PathProgramCache]: Analyzing trace with hash 1653362834, now seen corresponding path program 1 times [2024-11-20 22:44:05,314 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:05,314 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1767250417] [2024-11-20 22:44:05,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:05,314 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:05,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:05,428 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:05,428 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:05,429 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1767250417] [2024-11-20 22:44:05,429 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1767250417] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:05,429 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:05,429 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-20 22:44:05,429 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1771803739] [2024-11-20 22:44:05,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:05,429 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:05,432 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:05,433 INFO L85 PathProgramCache]: Analyzing trace with hash -496028017, now seen corresponding path program 1 times [2024-11-20 22:44:05,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:05,434 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271833803] [2024-11-20 22:44:05,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:05,434 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:05,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:05,775 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:05,775 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:05,775 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [271833803] [2024-11-20 22:44:05,776 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [271833803] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:05,776 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:05,776 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:05,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [713100389] [2024-11-20 22:44:05,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:05,780 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:05,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:05,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:44:05,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:44:05,781 INFO L87 Difference]: Start difference. First operand 20472 states and 37886 transitions. cyclomatic complexity: 17415 Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:06,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:06,682 INFO L93 Difference]: Finished difference Result 20451 states and 37791 transitions. [2024-11-20 22:44:06,682 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20451 states and 37791 transitions. [2024-11-20 22:44:06,859 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17489 [2024-11-20 22:44:06,915 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20451 states to 20451 states and 37791 transitions. [2024-11-20 22:44:06,916 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20451 [2024-11-20 22:44:06,934 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20451 [2024-11-20 22:44:06,934 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20451 states and 37791 transitions. [2024-11-20 22:44:06,951 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:06,952 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20451 states and 37791 transitions. [2024-11-20 22:44:06,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20451 states and 37791 transitions. [2024-11-20 22:44:07,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20451 to 20376. [2024-11-20 22:44:07,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20376 states, 20376 states have (on average 1.8491362387122103) internal successors, (37678), 20375 states have internal predecessors, (37678), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:07,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20376 states to 20376 states and 37678 transitions. [2024-11-20 22:44:07,187 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20376 states and 37678 transitions. [2024-11-20 22:44:07,188 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-20 22:44:07,189 INFO L425 stractBuchiCegarLoop]: Abstraction has 20376 states and 37678 transitions. [2024-11-20 22:44:07,189 INFO L332 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-11-20 22:44:07,189 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20376 states and 37678 transitions. [2024-11-20 22:44:07,375 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17414 [2024-11-20 22:44:07,375 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:07,375 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:07,380 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:07,380 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:07,380 INFO L745 eck$LassoCheckResult]: Stem: 331981#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 331982#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 333024#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 332579#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 332580#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 332398#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 332399#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 333589#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 332828#L3030 assume !(0 == getOrigin_~person#1); 332829#L3034 assume !(1 == getOrigin_~person#1); 332988#L3038 assume !(2 == getOrigin_~person#1); 332461#L3042 assume !(3 == getOrigin_~person#1); 332462#L3046 assume !(4 == getOrigin_~person#1); 333396#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 332006#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 332007#L2208 assume 0 == initPersonOnFloor_~floor#1; 333859#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 331794#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 332282#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 333208#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 333684#L2000 assume !(0 == callOnFloor_~floorID#1); 333685#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 332560#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 333979#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 333978#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 333974#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 333971#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 333967#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 333939#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 333935#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 333933#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 333929#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 333928#L2000-2 assume !(0 == callOnFloor_~floorID#1); 333927#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 333923#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 333922#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 333921#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 333920#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 333919#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 333918#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 333896#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 333151#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 332974#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 332975#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 333916#L1034 assume !(0 != timeShift_~tmp___9~2#1); 333622#L1125 assume !(1 == ~doorState~0); 331795#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 331796#L476 assume !(1 == stopRequestedInDirection_~dir#1); 333568#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 333068#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 331893#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 331894#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 333898#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 333917#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 331889#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 331890#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 333408#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 332040#L852-2 assume !(1 == ~currentHeading~0); 332041#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 332141#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 332930#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 333101#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 333214#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 333215#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 333455#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 333575#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 349803#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 349802#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 333049#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 333050#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 332099#L1637-2 [2024-11-20 22:44:07,381 INFO L747 eck$LassoCheckResult]: Loop: 332099#L1637-2 assume !false; 332018#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 332019#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 333015#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 333016#L1645 assume 1 != cleanup_~tmp___0~6#1; 333321#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 332619#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 332620#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 333507#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 332086#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 349410#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 349409#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 337130#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 337127#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 337128#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 349396#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 349391#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 349369#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 350977#L1034-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 337055#L1036-2 assume !(0 != ~persons_0~0); 350966#L1036-3 assume !(0 != ~persons_1~0); 350960#L1050-1 assume !(0 != ~persons_2~0); 350954#L1064-1 assume !(0 != ~persons_3~0); 350930#L1078-1 assume !(0 != ~persons_4~0); 350928#L1092-1 assume !(0 != ~persons_5~0); 350924#L1106-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~5#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 350923#L2028-12 assume !(0 == isPersonOnFloor_~floor#1); 350922#L2061-12 assume 1 == isPersonOnFloor_~floor#1; 350916#L2062-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 350893#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret24#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret24#1;havoc processWaitingOnFloor_#t~ret24#1; 350891#L935-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 350892#L935-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 351105#L2028-14 assume 0 == isPersonOnFloor_~floor#1; 351074#L2029-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 351073#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret26#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret26#1;havoc processWaitingOnFloor_#t~ret26#1; 351071#L948-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 351072#L948-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 351262#L2028-16 assume 0 == isPersonOnFloor_~floor#1; 351252#L2029-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 351230#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret28#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret28#1;havoc processWaitingOnFloor_#t~ret28#1; 351228#L961-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 351229#L961-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 350525#L2028-18 assume 0 == isPersonOnFloor_~floor#1; 350164#L2029-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 350153#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret30#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret30#1;havoc processWaitingOnFloor_#t~ret30#1; 350149#L974-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 350147#L974-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 350145#L2028-20 assume 0 == isPersonOnFloor_~floor#1; 350014#L2029-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 350007#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret32#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret32#1;havoc processWaitingOnFloor_#t~ret32#1; 350005#L987-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 350003#L987-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 350002#L2028-22 assume 0 == isPersonOnFloor_~floor#1; 349986#L2029-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 349900#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 349885#L1000-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 349880#L1000-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 349877#L1967-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 349878#L1979-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 332782#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 332411#L243-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 331954#L255-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 333144#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 333145#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 333217#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 333218#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 333524#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 332217#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 332218#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 332587#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 333825#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 332099#L1637-2 [2024-11-20 22:44:07,381 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:07,382 INFO L85 PathProgramCache]: Analyzing trace with hash 1653362834, now seen corresponding path program 2 times [2024-11-20 22:44:07,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:07,382 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1947153007] [2024-11-20 22:44:07,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:07,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:07,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:07,487 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:07,487 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:07,488 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1947153007] [2024-11-20 22:44:07,488 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1947153007] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:07,488 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:07,488 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-20 22:44:07,488 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1285688063] [2024-11-20 22:44:07,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:07,489 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:07,489 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:07,489 INFO L85 PathProgramCache]: Analyzing trace with hash 1799176055, now seen corresponding path program 1 times [2024-11-20 22:44:07,489 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:07,489 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [310375704] [2024-11-20 22:44:07,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:07,490 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:07,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:07,552 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:07,552 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:07,552 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [310375704] [2024-11-20 22:44:07,552 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [310375704] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:07,552 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:07,552 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:07,552 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1768483084] [2024-11-20 22:44:07,552 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:07,553 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:07,553 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:07,553 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-20 22:44:07,553 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-20 22:44:07,553 INFO L87 Difference]: Start difference. First operand 20376 states and 37678 transitions. cyclomatic complexity: 17303 Second operand has 6 states, 6 states have (on average 11.666666666666666) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:07,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:07,716 INFO L93 Difference]: Finished difference Result 20376 states and 37671 transitions. [2024-11-20 22:44:07,716 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20376 states and 37671 transitions. [2024-11-20 22:44:07,924 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17414 [2024-11-20 22:44:07,968 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20376 states to 20376 states and 37671 transitions. [2024-11-20 22:44:07,968 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20376 [2024-11-20 22:44:07,984 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20376 [2024-11-20 22:44:07,985 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20376 states and 37671 transitions. [2024-11-20 22:44:08,001 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:08,001 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20376 states and 37671 transitions. [2024-11-20 22:44:08,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20376 states and 37671 transitions. [2024-11-20 22:44:08,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20376 to 20374. [2024-11-20 22:44:08,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20374 states, 20374 states have (on average 1.8488760184548936) internal successors, (37669), 20373 states have internal predecessors, (37669), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:08,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20374 states to 20374 states and 37669 transitions. [2024-11-20 22:44:08,377 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20374 states and 37669 transitions. [2024-11-20 22:44:08,377 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-20 22:44:08,378 INFO L425 stractBuchiCegarLoop]: Abstraction has 20374 states and 37669 transitions. [2024-11-20 22:44:08,378 INFO L332 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-11-20 22:44:08,378 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20374 states and 37669 transitions. [2024-11-20 22:44:08,431 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17414 [2024-11-20 22:44:08,432 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:08,432 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:08,436 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:08,436 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:08,436 INFO L745 eck$LassoCheckResult]: Stem: 372750#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 372751#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 373770#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 373329#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 373330#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 373153#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 373154#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 374323#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 373574#L3030 assume !(0 == getOrigin_~person#1); 373575#L3034 assume !(1 == getOrigin_~person#1); 373738#L3038 assume !(2 == getOrigin_~person#1); 373212#L3042 assume !(3 == getOrigin_~person#1); 373213#L3046 assume !(4 == getOrigin_~person#1); 374125#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 372772#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 372773#L2208 assume !(0 == initPersonOnFloor_~floor#1); 373988#L2235 assume 1 == initPersonOnFloor_~floor#1; 373788#L2236 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 372560#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 373038#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 373942#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 374424#L2000 assume !(0 == callOnFloor_~floorID#1); 374426#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 373081#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 373082#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 373147#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 372791#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 372474#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 372980#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 372981#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 373071#L2236-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 374662#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 374660#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 374656#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 374655#L2000-2 assume !(0 == callOnFloor_~floorID#1); 374654#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 374650#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 374649#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 374648#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 374647#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 374646#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 374645#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 374631#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 373893#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 373719#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 373721#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 374642#L1034 assume !(0 != timeShift_~tmp___9~2#1); 374353#L1125 assume !(1 == ~doorState~0); 372561#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 372562#L476 assume !(1 == stopRequestedInDirection_~dir#1); 374303#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 373811#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 372658#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 372659#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 374632#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 374644#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 372654#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 372655#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 374137#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 372806#L852-2 assume !(1 == ~currentHeading~0); 372807#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 372902#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 373675#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 373843#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 373948#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 373949#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 374186#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 386155#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 386160#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 386158#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 386139#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 386137#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 386135#L1637-2 [2024-11-20 22:44:08,437 INFO L747 eck$LassoCheckResult]: Loop: 386135#L1637-2 assume !false; 386134#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 386133#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 386132#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 386131#L1645 assume 1 != cleanup_~tmp___0~6#1; 386130#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 386129#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 386128#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 386127#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 372851#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 392628#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 392627#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 392626#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 374627#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 374629#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 392042#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 387815#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 387813#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 386965#L1034-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 386958#L1036-2 assume !(0 != ~persons_0~0); 386952#L1036-3 assume !(0 != ~persons_1~0); 386947#L1050-1 assume !(0 != ~persons_2~0); 386936#L1064-1 assume !(0 != ~persons_3~0); 386912#L1078-1 assume !(0 != ~persons_4~0); 386910#L1092-1 assume !(0 != ~persons_5~0); 386906#L1106-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~5#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 386905#L2028-12 assume !(0 == isPersonOnFloor_~floor#1); 386904#L2061-12 assume 1 == isPersonOnFloor_~floor#1; 386898#L2062-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 386869#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret24#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret24#1;havoc processWaitingOnFloor_#t~ret24#1; 386867#L935-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 386865#L935-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 386864#L2028-14 assume 0 == isPersonOnFloor_~floor#1; 386656#L2029-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 386649#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret26#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret26#1;havoc processWaitingOnFloor_#t~ret26#1; 386647#L948-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 386645#L948-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 386644#L2028-16 assume 0 == isPersonOnFloor_~floor#1; 386630#L2029-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 386608#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret28#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret28#1;havoc processWaitingOnFloor_#t~ret28#1; 386606#L961-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 386607#L961-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 386828#L2028-18 assume 0 == isPersonOnFloor_~floor#1; 386805#L2029-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 386794#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret30#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret30#1;havoc processWaitingOnFloor_#t~ret30#1; 386792#L974-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 386793#L974-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 387349#L2028-20 assume 0 == isPersonOnFloor_~floor#1; 387310#L2029-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 387303#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret32#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret32#1;havoc processWaitingOnFloor_#t~ret32#1; 387301#L987-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 387299#L987-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 387298#L2028-22 assume 0 == isPersonOnFloor_~floor#1; 387285#L2029-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 387262#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 387260#L1000-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 387261#L1000-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 386222#L1967-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 386211#L1979-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 386204#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 386197#L243-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 386182#L255-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 386179#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 386178#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 386177#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 386175#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 386151#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 386147#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 386144#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 386138#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 386136#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 386135#L1637-2 [2024-11-20 22:44:08,437 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:08,437 INFO L85 PathProgramCache]: Analyzing trace with hash -1344710500, now seen corresponding path program 1 times [2024-11-20 22:44:08,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:08,438 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [936060490] [2024-11-20 22:44:08,438 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:08,438 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:08,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:08,532 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:08,533 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:08,533 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [936060490] [2024-11-20 22:44:08,533 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [936060490] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:08,533 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:08,533 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:08,533 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [515278832] [2024-11-20 22:44:08,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:08,534 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:08,534 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:08,535 INFO L85 PathProgramCache]: Analyzing trace with hash -2005663943, now seen corresponding path program 1 times [2024-11-20 22:44:08,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:08,535 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [674645731] [2024-11-20 22:44:08,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:08,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:08,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:08,612 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:08,613 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:08,613 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [674645731] [2024-11-20 22:44:08,613 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [674645731] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:08,613 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:08,613 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:08,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [506050875] [2024-11-20 22:44:08,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:08,614 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:08,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:08,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:44:08,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:44:08,615 INFO L87 Difference]: Start difference. First operand 20374 states and 37669 transitions. cyclomatic complexity: 17296 Second operand has 5 states, 5 states have (on average 14.2) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:09,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:09,857 INFO L93 Difference]: Finished difference Result 27112 states and 49960 transitions. [2024-11-20 22:44:09,857 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27112 states and 49960 transitions. [2024-11-20 22:44:10,124 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24164 [2024-11-20 22:44:10,194 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27112 states to 27112 states and 49960 transitions. [2024-11-20 22:44:10,194 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27112 [2024-11-20 22:44:10,213 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27112 [2024-11-20 22:44:10,213 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27112 states and 49960 transitions. [2024-11-20 22:44:10,230 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:10,230 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27112 states and 49960 transitions. [2024-11-20 22:44:10,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27112 states and 49960 transitions. [2024-11-20 22:44:10,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27112 to 26516. [2024-11-20 22:44:10,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26516 states, 26516 states have (on average 1.8506562075727861) internal successors, (49072), 26515 states have internal predecessors, (49072), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:10,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26516 states to 26516 states and 49072 transitions. [2024-11-20 22:44:10,457 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26516 states and 49072 transitions. [2024-11-20 22:44:10,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-20 22:44:10,457 INFO L425 stractBuchiCegarLoop]: Abstraction has 26516 states and 49072 transitions. [2024-11-20 22:44:10,458 INFO L332 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-11-20 22:44:10,458 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26516 states and 49072 transitions. [2024-11-20 22:44:10,527 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:10,527 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:10,527 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:10,532 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:10,532 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:10,533 INFO L745 eck$LassoCheckResult]: Stem: 420249#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 420250#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 421277#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 420838#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 420839#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 420657#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 420658#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 421850#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 421083#L3030 assume !(0 == getOrigin_~person#1); 421084#L3034 assume !(1 == getOrigin_~person#1); 421241#L3038 assume !(2 == getOrigin_~person#1); 420719#L3042 assume !(3 == getOrigin_~person#1); 420720#L3046 assume !(4 == getOrigin_~person#1); 421650#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 420272#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 420273#L2208 assume !(0 == initPersonOnFloor_~floor#1); 421503#L2235 assume 1 == initPersonOnFloor_~floor#1; 421296#L2236 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 420058#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 420545#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 421455#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 421952#L2000 assume !(0 == callOnFloor_~floorID#1); 421953#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 420817#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 422257#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 422256#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 422255#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 422251#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 422259#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 422247#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 421619#L2236-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 420132#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 422183#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 422210#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 422209#L2000-2 assume !(0 == callOnFloor_~floorID#1); 422208#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 422204#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 422203#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 422202#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 422201#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 422200#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 422199#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 422180#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 421406#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 421226#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 421227#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 422197#L1034 assume !(0 != timeShift_~tmp___9~2#1); 421882#L1125 assume !(1 == ~doorState~0); 420059#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 420060#L476 assume !(1 == stopRequestedInDirection_~dir#1); 421828#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 421321#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 420157#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 420158#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 422182#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 422198#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 420147#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 420148#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 421662#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 420305#L852-2 assume !(1 == ~currentHeading~0); 420306#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 420405#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 421182#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 421353#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 421461#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 421462#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 421709#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 420859#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 420403#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 420971#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 420402#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 422097#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 422098#L1637-2 [2024-11-20 22:44:10,533 INFO L747 eck$LassoCheckResult]: Loop: 422098#L1637-2 assume !false; 434846#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 434842#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 434843#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 434838#L1645 assume 1 != cleanup_~tmp___0~6#1; 434839#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 434827#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 434828#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 428825#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 428823#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 428821#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 428822#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 440489#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 440487#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 440465#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 440463#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 428786#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 428763#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 428764#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 440418#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 440414#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 440415#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 440452#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 440417#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 440413#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 440407#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 440393#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 427671#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 427662#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 427655#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 427656#L645-2 assume !(0 == ~currentFloorID~0); 427701#L651-2 assume ~currentFloorID~0 > 0; 427695#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 427696#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 427700#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 427694#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 427460#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 427387#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 427379#L852-3 assume !(1 == ~currentHeading~0); 427367#L862-9 assume !(0 == ~currentFloorID~0); 424603#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 424598#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 424599#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 428745#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 428744#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 428743#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 428742#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 422853#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 422848#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 422809#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 422810#L1637-2 assume !false; 422805#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 422806#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 422801#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 422802#L1645 assume 1 != cleanup_~tmp___0~6#1; 422797#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 422798#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 422793#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 422794#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 428731#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 428782#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 428780#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 422762#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 422763#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 422742#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 422743#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 422738#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 422739#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 422736#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 422735#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 422734#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 422733#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 422731#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 422730#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 422729#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 422728#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 422727#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 422725#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 422726#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 422723#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 428477#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 428475#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 428471#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 428472#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 420688#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 420689#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 428502#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 428500#L852-5 assume !(1 == ~currentHeading~0); 428498#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 428499#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 421400#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 421401#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 434878#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 434877#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 434876#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 434874#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 434870#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 434871#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 434849#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 434850#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 422098#L1637-2 [2024-11-20 22:44:10,534 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:10,534 INFO L85 PathProgramCache]: Analyzing trace with hash -1344710500, now seen corresponding path program 2 times [2024-11-20 22:44:10,534 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:10,534 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1714955610] [2024-11-20 22:44:10,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:10,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:10,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:10,610 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:10,610 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:10,610 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1714955610] [2024-11-20 22:44:10,611 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1714955610] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:10,611 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:10,611 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:10,611 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [507240764] [2024-11-20 22:44:10,611 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:10,611 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:10,612 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:10,612 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 1 times [2024-11-20 22:44:10,612 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:10,612 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [770505616] [2024-11-20 22:44:10,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:10,612 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:10,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:10,886 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:10,887 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:10,887 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [770505616] [2024-11-20 22:44:10,887 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [770505616] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:10,887 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:10,887 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:10,887 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200383726] [2024-11-20 22:44:10,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:10,888 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:10,888 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:10,888 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:44:10,888 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:44:10,888 INFO L87 Difference]: Start difference. First operand 26516 states and 49072 transitions. cyclomatic complexity: 22557 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:11,153 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:11,154 INFO L93 Difference]: Finished difference Result 26560 states and 49132 transitions. [2024-11-20 22:44:11,154 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26560 states and 49132 transitions. [2024-11-20 22:44:11,275 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:11,341 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26560 states to 26560 states and 49132 transitions. [2024-11-20 22:44:11,341 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26560 [2024-11-20 22:44:11,361 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26560 [2024-11-20 22:44:11,361 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26560 states and 49132 transitions. [2024-11-20 22:44:11,378 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:11,378 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26560 states and 49132 transitions. [2024-11-20 22:44:11,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26560 states and 49132 transitions. [2024-11-20 22:44:11,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26560 to 26516. [2024-11-20 22:44:11,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26516 states, 26516 states have (on average 1.8501282244682455) internal successors, (49058), 26515 states have internal predecessors, (49058), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:11,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26516 states to 26516 states and 49058 transitions. [2024-11-20 22:44:11,773 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26516 states and 49058 transitions. [2024-11-20 22:44:11,773 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:11,774 INFO L425 stractBuchiCegarLoop]: Abstraction has 26516 states and 49058 transitions. [2024-11-20 22:44:11,774 INFO L332 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2024-11-20 22:44:11,774 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26516 states and 49058 transitions. [2024-11-20 22:44:11,840 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:11,840 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:11,841 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:11,844 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:11,844 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:11,844 INFO L745 eck$LassoCheckResult]: Stem: 473340#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 473341#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 474371#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 473922#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 473923#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 473744#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 473745#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 474950#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 474173#L3030 assume !(0 == getOrigin_~person#1); 474174#L3034 assume !(1 == getOrigin_~person#1); 474336#L3038 assume !(2 == getOrigin_~person#1); 473808#L3042 assume !(3 == getOrigin_~person#1); 473809#L3046 assume !(4 == getOrigin_~person#1); 474739#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 473362#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 473363#L2208 assume !(0 == initPersonOnFloor_~floor#1); 474597#L2235 assume 1 == initPersonOnFloor_~floor#1; 474389#L2236 assume !(0 == initPersonOnFloor_~person#1); 474390#L2239 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 473147#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 473634#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 474547#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 475056#L2000 assume !(0 == callOnFloor_~floorID#1); 475058#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 473676#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 473677#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 473738#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 473380#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 473062#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 473572#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 473573#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 473667#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 474708#L2239-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 475319#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 475317#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 475313#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 475312#L2000-2 assume !(0 == callOnFloor_~floorID#1); 475311#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 475307#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 475305#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 475304#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 475303#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 475302#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 475301#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 475285#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 474496#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 474319#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 474320#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 475299#L1034 assume !(0 != timeShift_~tmp___9~2#1); 474988#L1125 assume !(1 == ~doorState~0); 473148#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 473149#L476 assume !(1 == stopRequestedInDirection_~dir#1); 474928#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 474415#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 473248#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 473249#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 475287#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 475300#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 473244#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 473245#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 474751#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 473395#L852-2 assume !(1 == ~currentHeading~0); 473396#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 473492#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 474274#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 474447#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 474553#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 474554#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 474807#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 477740#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 477736#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 478723#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 481594#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 475191#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 475192#L1637-2 [2024-11-20 22:44:11,845 INFO L747 eck$LassoCheckResult]: Loop: 475192#L1637-2 assume !false; 487921#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 487922#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 487917#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 487918#L1645 assume 1 != cleanup_~tmp___0~6#1; 487913#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 487914#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 487871#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 487872#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 481920#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 481922#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 481912#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 481910#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 481889#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 481879#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 481874#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 481875#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 487875#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 487876#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 488005#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 488002#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 488003#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 487991#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 481932#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 481923#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 481924#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 476751#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 476749#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 476747#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 476745#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 476744#L645-2 assume !(0 == ~currentFloorID~0); 476739#L651-2 assume ~currentFloorID~0 > 0; 476737#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 476697#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 476695#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 476693#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 476678#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 477081#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 477078#L852-3 assume !(1 == ~currentHeading~0); 477076#L862-9 assume !(0 == ~currentFloorID~0); 477074#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 476543#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 476539#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 476540#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 476532#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 476533#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 476530#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 476531#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 475732#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 475733#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 475696#L1637-2 assume !false; 475697#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 475692#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 475693#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 475688#L1645 assume 1 != cleanup_~tmp___0~6#1; 475689#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 475684#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 475685#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 475679#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 475681#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 475674#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 475675#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 475649#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 475650#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 475630#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 475631#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 475626#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 475627#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 475624#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 475623#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 475622#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 475621#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 475619#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 475618#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 475615#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 475614#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 475598#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 475583#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 475570#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 475560#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 475556#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 475554#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 475553#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 475551#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 473778#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 473779#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 477703#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 477704#L852-5 assume !(1 == ~currentHeading~0); 478720#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 473992#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 474494#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 474495#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 488045#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 488044#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 488043#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 487939#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 487935#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 487931#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 487932#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 487928#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 475192#L1637-2 [2024-11-20 22:44:11,845 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:11,846 INFO L85 PathProgramCache]: Analyzing trace with hash -1887581108, now seen corresponding path program 1 times [2024-11-20 22:44:11,846 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:11,846 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [70421818] [2024-11-20 22:44:11,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:11,846 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:11,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:11,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:11,921 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:11,922 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [70421818] [2024-11-20 22:44:11,922 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [70421818] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:11,922 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:11,922 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:11,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1023700438] [2024-11-20 22:44:11,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:11,922 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:11,923 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:11,923 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 1 times [2024-11-20 22:44:11,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:11,923 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1961129113] [2024-11-20 22:44:11,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:11,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:11,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:12,013 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:12,014 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:12,014 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1961129113] [2024-11-20 22:44:12,014 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1961129113] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:12,014 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:12,014 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:12,014 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1250804500] [2024-11-20 22:44:12,014 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:12,015 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:12,015 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:12,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:44:12,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:44:12,016 INFO L87 Difference]: Start difference. First operand 26516 states and 49058 transitions. cyclomatic complexity: 22543 Second operand has 4 states, 4 states have (on average 18.5) internal successors, (74), 4 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:12,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:12,276 INFO L93 Difference]: Finished difference Result 26560 states and 49118 transitions. [2024-11-20 22:44:12,277 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26560 states and 49118 transitions. [2024-11-20 22:44:12,652 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:12,726 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26560 states to 26560 states and 49118 transitions. [2024-11-20 22:44:12,727 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26560 [2024-11-20 22:44:12,753 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26560 [2024-11-20 22:44:12,754 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26560 states and 49118 transitions. [2024-11-20 22:44:12,779 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:12,779 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26560 states and 49118 transitions. [2024-11-20 22:44:12,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26560 states and 49118 transitions. [2024-11-20 22:44:13,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26560 to 26516. [2024-11-20 22:44:13,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26516 states, 26516 states have (on average 1.849600241363705) internal successors, (49044), 26515 states have internal predecessors, (49044), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:13,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26516 states to 26516 states and 49044 transitions. [2024-11-20 22:44:13,081 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26516 states and 49044 transitions. [2024-11-20 22:44:13,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:13,082 INFO L425 stractBuchiCegarLoop]: Abstraction has 26516 states and 49044 transitions. [2024-11-20 22:44:13,082 INFO L332 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2024-11-20 22:44:13,082 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26516 states and 49044 transitions. [2024-11-20 22:44:13,165 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:13,165 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:13,165 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:13,169 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:13,169 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:13,170 INFO L745 eck$LassoCheckResult]: Stem: 526422#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 526423#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 527477#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 527017#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 527018#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 526835#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 526836#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 528064#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 527271#L3030 assume !(0 == getOrigin_~person#1); 527272#L3034 assume !(1 == getOrigin_~person#1); 527443#L3038 assume !(2 == getOrigin_~person#1); 526900#L3042 assume !(3 == getOrigin_~person#1); 526901#L3046 assume !(4 == getOrigin_~person#1); 527851#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 526447#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 526448#L2208 assume !(0 == initPersonOnFloor_~floor#1); 527706#L2235 assume 1 == initPersonOnFloor_~floor#1; 527497#L2236 assume !(0 == initPersonOnFloor_~person#1); 527498#L2239 assume !(1 == initPersonOnFloor_~person#1); 527586#L2242 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 526235#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 526722#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 527657#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 528170#L2000 assume !(0 == callOnFloor_~floorID#1); 528172#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 526767#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 526768#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 526828#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 526829#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 528464#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 528463#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 528460#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 527820#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 526305#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 526306#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 528437#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 528435#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 528431#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 528430#L2000-2 assume !(0 == callOnFloor_~floorID#1); 528429#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 528425#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 528423#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 528422#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 528421#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 528420#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 528419#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 528403#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 527604#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 527423#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 527425#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 528416#L1034 assume !(0 != timeShift_~tmp___9~2#1); 528099#L1125 assume !(1 == ~doorState~0); 526236#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 526237#L476 assume !(1 == stopRequestedInDirection_~dir#1); 528040#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 527522#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 526333#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 526334#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 528404#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 528418#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 526329#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 526330#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 527866#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 526481#L852-2 assume !(1 == ~currentHeading~0); 526482#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 526582#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 527378#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 527554#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 527663#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 527664#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 527919#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 527041#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 526580#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 527156#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 526579#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 528307#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 528308#L1637-2 [2024-11-20 22:44:13,170 INFO L747 eck$LassoCheckResult]: Loop: 528308#L1637-2 assume !false; 552585#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 552584#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 552583#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 549580#L1645 assume 1 != cleanup_~tmp___0~6#1; 549034#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 548582#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 544400#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 544393#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 539983#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 539493#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 535566#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 535562#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 535561#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 535550#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 535000#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 534993#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 534749#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 534750#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 537073#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 546631#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 546632#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 546635#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 546633#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 546630#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 546628#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 546627#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 528802#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 528801#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 528798#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 528796#L645-2 assume !(0 == ~currentFloorID~0); 528794#L651-2 assume ~currentFloorID~0 > 0; 527801#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 526687#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 526688#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 528326#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 530743#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 530735#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 530728#L852-3 assume !(1 == ~currentHeading~0); 530721#L862-9 assume !(0 == ~currentFloorID~0); 530711#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 530706#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 530707#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 535634#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 535632#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 535633#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 530693#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 530694#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 535615#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 535614#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 535613#L1637-2 assume !false; 535612#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 535611#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 535610#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 535609#L1645 assume 1 != cleanup_~tmp___0~6#1; 535608#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 535604#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 535602#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 528918#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 528916#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 528915#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 528913#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 528896#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 528897#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 534992#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 528874#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 528875#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 534748#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 528870#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 528869#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 528868#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 528867#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 528865#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 528862#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 528846#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 528200#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 527421#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 527422#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 528137#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 528811#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 527044#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 526359#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 526361#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 533818#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 526869#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 526574#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 526937#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 526938#L852-5 assume !(1 == ~currentHeading~0); 534622#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 534623#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 527602#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 527603#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 552561#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 527668#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 527669#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 552595#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 552591#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 552588#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 552587#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 552586#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 528308#L1637-2 [2024-11-20 22:44:13,172 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:13,172 INFO L85 PathProgramCache]: Analyzing trace with hash -82707140, now seen corresponding path program 1 times [2024-11-20 22:44:13,172 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:13,172 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2042299050] [2024-11-20 22:44:13,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:13,172 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:13,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:13,264 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:13,264 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:13,264 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2042299050] [2024-11-20 22:44:13,264 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2042299050] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:13,264 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:13,264 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:13,264 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2132544812] [2024-11-20 22:44:13,265 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:13,265 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:13,265 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:13,265 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 2 times [2024-11-20 22:44:13,265 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:13,265 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [682894020] [2024-11-20 22:44:13,266 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:13,266 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:13,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:13,374 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:13,375 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:13,375 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [682894020] [2024-11-20 22:44:13,375 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [682894020] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:13,375 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:13,375 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:13,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1843898377] [2024-11-20 22:44:13,376 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:13,376 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:13,377 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:13,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:44:13,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:44:13,377 INFO L87 Difference]: Start difference. First operand 26516 states and 49044 transitions. cyclomatic complexity: 22529 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:13,836 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:13,836 INFO L93 Difference]: Finished difference Result 26532 states and 49066 transitions. [2024-11-20 22:44:13,837 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26532 states and 49066 transitions. [2024-11-20 22:44:13,918 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:13,972 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26532 states to 26532 states and 49066 transitions. [2024-11-20 22:44:13,972 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26532 [2024-11-20 22:44:13,987 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26532 [2024-11-20 22:44:13,987 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26532 states and 49066 transitions. [2024-11-20 22:44:14,001 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:14,001 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26532 states and 49066 transitions. [2024-11-20 22:44:14,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26532 states and 49066 transitions. [2024-11-20 22:44:14,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26532 to 26516. [2024-11-20 22:44:14,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26516 states, 26516 states have (on average 1.8494493890481218) internal successors, (49040), 26515 states have internal predecessors, (49040), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:14,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26516 states to 26516 states and 49040 transitions. [2024-11-20 22:44:14,220 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26516 states and 49040 transitions. [2024-11-20 22:44:14,220 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:14,221 INFO L425 stractBuchiCegarLoop]: Abstraction has 26516 states and 49040 transitions. [2024-11-20 22:44:14,221 INFO L332 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2024-11-20 22:44:14,221 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26516 states and 49040 transitions. [2024-11-20 22:44:14,286 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:14,286 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:14,286 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:14,289 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:14,289 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:14,289 INFO L745 eck$LassoCheckResult]: Stem: 579481#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 579482#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 580512#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 580068#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 580069#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 579891#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 579892#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 581087#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 580316#L3030 assume !(0 == getOrigin_~person#1); 580317#L3034 assume !(1 == getOrigin_~person#1); 580477#L3038 assume !(2 == getOrigin_~person#1); 579952#L3042 assume !(3 == getOrigin_~person#1); 579953#L3046 assume !(4 == getOrigin_~person#1); 580879#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 579505#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 579506#L2208 assume !(0 == initPersonOnFloor_~floor#1); 580739#L2235 assume !(1 == initPersonOnFloor_~floor#1); 580740#L2262 assume !(2 == initPersonOnFloor_~floor#1); 579372#L2289 assume !(3 == initPersonOnFloor_~floor#1); 579374#L2316 assume !(4 == initPersonOnFloor_~floor#1); 579294#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 579777#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 580692#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 581184#L2000 assume !(0 == callOnFloor_~floorID#1); 581185#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 580050#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 581463#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 581462#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 581459#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 581457#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 581454#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 581451#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 581449#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 581447#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 581440#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 581423#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 581421#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 581417#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 581416#L2000-2 assume !(0 == callOnFloor_~floorID#1); 581415#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 581411#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 581410#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 581409#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 581408#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581407#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 581406#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 581393#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 580642#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 580461#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 580462#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 581404#L1034 assume !(0 != timeShift_~tmp___9~2#1); 581120#L1125 assume !(1 == ~doorState~0); 579295#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 579296#L476 assume !(1 == stopRequestedInDirection_~dir#1); 581063#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 580558#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 579392#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 579393#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 581394#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 581405#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 579385#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 579386#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 580892#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 579540#L852-2 assume !(1 == ~currentHeading~0); 579541#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 579640#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 580416#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 580591#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 580698#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 580699#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 580939#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 580091#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 579638#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 580204#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 579637#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 581307#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 581308#L1637-2 [2024-11-20 22:44:14,290 INFO L747 eck$LassoCheckResult]: Loop: 581308#L1637-2 assume !false; 591879#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 591878#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 591877#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 591876#L1645 assume 1 != cleanup_~tmp___0~6#1; 591875#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 591873#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 591874#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 601126#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 601127#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 605346#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 605596#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 605589#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 605587#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 605565#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 605563#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 605561#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 605559#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 605556#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 580756#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 580110#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 580112#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 580122#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 579831#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 580119#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 581244#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 581332#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 581643#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 581623#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 581620#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 581621#L645-2 assume !(0 == ~currentFloorID~0); 581634#L651-2 assume ~currentFloorID~0 > 0; 581631#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 581629#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581610#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 581611#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 583371#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 583363#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 583357#L852-3 assume !(1 == ~currentHeading~0); 583350#L862-9 assume !(0 == ~currentFloorID~0); 583340#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 583335#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 583336#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 587962#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 587959#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 587960#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 587961#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 581908#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 581903#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 581850#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 581851#L1637-2 assume !false; 581846#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 581847#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 581842#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 581843#L1645 assume 1 != cleanup_~tmp___0~6#1; 581838#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 581839#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581834#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 581835#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 587939#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 587970#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 587999#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581803#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 581804#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 581783#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 581784#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 581779#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 581780#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581777#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 581776#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 581775#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 581774#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 581772#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 581771#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 581768#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 581770#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 586709#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 586675#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 579543#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 579544#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 587165#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 587164#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 587162#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 587159#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 579923#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 579924#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 587770#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 587768#L852-5 assume !(1 == ~currentHeading~0); 587767#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 580137#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 580639#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 580640#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 591910#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 591908#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 591906#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 591904#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 591902#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 591890#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 591883#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 591882#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 581308#L1637-2 [2024-11-20 22:44:14,291 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:14,291 INFO L85 PathProgramCache]: Analyzing trace with hash 84048316, now seen corresponding path program 1 times [2024-11-20 22:44:14,291 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:14,291 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [353044182] [2024-11-20 22:44:14,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:14,291 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:14,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:14,358 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:14,359 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:14,359 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [353044182] [2024-11-20 22:44:14,359 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [353044182] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:14,359 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:14,359 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:14,359 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [755844912] [2024-11-20 22:44:14,359 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:14,360 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:14,360 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:14,360 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 2 times [2024-11-20 22:44:14,360 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:14,360 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2103651817] [2024-11-20 22:44:14,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:14,360 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:14,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:14,438 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:14,438 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:14,438 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2103651817] [2024-11-20 22:44:14,439 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2103651817] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:14,439 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:14,439 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:14,439 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1366625018] [2024-11-20 22:44:14,439 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:14,439 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:14,439 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:14,440 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:44:14,440 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:44:14,440 INFO L87 Difference]: Start difference. First operand 26516 states and 49040 transitions. cyclomatic complexity: 22525 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:14,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:14,883 INFO L93 Difference]: Finished difference Result 26503 states and 49014 transitions. [2024-11-20 22:44:14,883 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26503 states and 49014 transitions. [2024-11-20 22:44:14,982 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:15,049 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26503 states to 26503 states and 49014 transitions. [2024-11-20 22:44:15,050 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26503 [2024-11-20 22:44:15,072 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26503 [2024-11-20 22:44:15,073 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26503 states and 49014 transitions. [2024-11-20 22:44:15,090 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:15,090 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26503 states and 49014 transitions. [2024-11-20 22:44:15,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26503 states and 49014 transitions. [2024-11-20 22:44:15,267 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26503 to 26501. [2024-11-20 22:44:15,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26501 states, 26501 states have (on average 1.8494396437870269) internal successors, (49012), 26500 states have internal predecessors, (49012), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:15,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26501 states to 26501 states and 49012 transitions. [2024-11-20 22:44:15,333 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26501 states and 49012 transitions. [2024-11-20 22:44:15,333 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:15,334 INFO L425 stractBuchiCegarLoop]: Abstraction has 26501 states and 49012 transitions. [2024-11-20 22:44:15,334 INFO L332 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2024-11-20 22:44:15,334 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26501 states and 49012 transitions. [2024-11-20 22:44:15,403 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:15,403 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:15,403 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:15,407 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:15,407 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:15,407 INFO L745 eck$LassoCheckResult]: Stem: 632508#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 632509#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 633569#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 633099#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 633100#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 632916#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 632917#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 634186#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 633358#L3030 assume !(0 == getOrigin_~person#1); 633359#L3034 assume !(1 == getOrigin_~person#1); 633536#L3038 assume !(2 == getOrigin_~person#1); 632979#L3042 assume !(3 == getOrigin_~person#1); 632980#L3046 assume !(4 == getOrigin_~person#1); 633967#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 632534#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 632535#L2208 assume !(0 == initPersonOnFloor_~floor#1); 633811#L2235 assume 1 == initPersonOnFloor_~floor#1; 633589#L2236 assume !(0 == initPersonOnFloor_~person#1); 633590#L2239 assume !(1 == initPersonOnFloor_~person#1); 633682#L2242 assume !(2 == initPersonOnFloor_~person#1); 633683#L2245 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 632804#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 632805#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 633761#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 634286#L2000 assume !(0 == callOnFloor_~floorID#1); 634288#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 632846#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 632847#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 632910#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 632550#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 632551#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 634649#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 634630#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 632838#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 632395#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 632396#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 634608#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 634606#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 634602#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 634601#L2000-2 assume !(0 == callOnFloor_~floorID#1); 634600#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 634596#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 634595#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 634594#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 634593#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 634592#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 634591#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 634567#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 633700#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 633518#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 633520#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 634588#L1034 assume !(0 != timeShift_~tmp___9~2#1); 634219#L1125 assume !(1 == ~doorState~0); 632325#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 632326#L476 assume !(1 == stopRequestedInDirection_~dir#1); 634159#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 633617#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 632420#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 632421#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 634571#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 634590#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 632413#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 632414#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 633981#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 632569#L852-2 assume !(1 == ~currentHeading~0); 632570#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 632666#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 633469#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 633650#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 633767#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 633768#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 634037#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 633124#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 632664#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 633238#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 632663#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 640923#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 640920#L1637-2 [2024-11-20 22:44:15,408 INFO L747 eck$LassoCheckResult]: Loop: 640920#L1637-2 assume !false; 640918#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 640915#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 640912#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 640909#L1645 assume 1 != cleanup_~tmp___0~6#1; 640906#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 640903#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 640900#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 640896#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 640897#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 644412#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 647466#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 647455#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 647427#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 647405#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 647403#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 647401#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 640856#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 640857#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 641111#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 646679#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 646680#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 646683#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 646681#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 646678#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 646676#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 646675#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 634913#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 634907#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 634908#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 634899#L645-2 assume !(0 == ~currentFloorID~0); 634900#L651-2 assume ~currentFloorID~0 > 0; 633916#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 633917#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 634891#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 634892#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 640281#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 640254#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 640250#L852-3 assume !(1 == ~currentHeading~0); 637281#L862-9 assume !(0 == ~currentFloorID~0); 637271#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 637264#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 637265#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 641436#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 635581#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 635582#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 635583#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 640276#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 641212#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 641211#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 641210#L1637-2 assume !false; 641209#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 641208#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 641207#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 641206#L1645 assume 1 != cleanup_~tmp___0~6#1; 641205#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 641204#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 641203#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 641202#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 635451#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 635452#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 635444#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 635428#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 635429#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 641190#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 641189#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 635391#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 635392#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 635389#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 635388#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 635387#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 635386#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 635384#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 635383#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 635381#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 634321#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 633516#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 633517#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 632572#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 632573#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 635317#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 635315#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 635316#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 635302#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 635276#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 635256#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 635254#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 635255#L852-5 assume !(1 == ~currentHeading~0); 635361#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 633171#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 634585#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 641235#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 641234#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 641233#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 641231#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 641229#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 641228#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 641184#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 641177#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 640922#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 640920#L1637-2 [2024-11-20 22:44:15,408 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:15,408 INFO L85 PathProgramCache]: Analyzing trace with hash 1738602428, now seen corresponding path program 1 times [2024-11-20 22:44:15,408 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:15,408 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208556481] [2024-11-20 22:44:15,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:15,409 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:15,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:15,477 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:15,477 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:15,477 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208556481] [2024-11-20 22:44:15,477 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208556481] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:15,478 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:15,478 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:15,478 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1713917337] [2024-11-20 22:44:15,478 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:15,478 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:15,479 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:15,479 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 3 times [2024-11-20 22:44:15,479 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:15,479 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [103213664] [2024-11-20 22:44:15,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:15,479 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:15,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:15,777 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:15,777 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:15,777 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [103213664] [2024-11-20 22:44:15,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [103213664] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:15,777 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:15,777 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:15,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [337544473] [2024-11-20 22:44:15,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:15,778 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:15,778 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:15,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:44:15,779 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:44:15,779 INFO L87 Difference]: Start difference. First operand 26501 states and 49012 transitions. cyclomatic complexity: 22512 Second operand has 4 states, 4 states have (on average 19.25) internal successors, (77), 4 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:15,980 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:15,980 INFO L93 Difference]: Finished difference Result 26529 states and 49049 transitions. [2024-11-20 22:44:15,981 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26529 states and 49049 transitions. [2024-11-20 22:44:16,109 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:16,180 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26529 states to 26529 states and 49049 transitions. [2024-11-20 22:44:16,180 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26529 [2024-11-20 22:44:16,202 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26529 [2024-11-20 22:44:16,202 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26529 states and 49049 transitions. [2024-11-20 22:44:16,221 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:16,221 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26529 states and 49049 transitions. [2024-11-20 22:44:16,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26529 states and 49049 transitions. [2024-11-20 22:44:16,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26529 to 26501. [2024-11-20 22:44:16,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26501 states, 26501 states have (on average 1.8490245651107506) internal successors, (49001), 26500 states have internal predecessors, (49001), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:16,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26501 states to 26501 states and 49001 transitions. [2024-11-20 22:44:16,457 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26501 states and 49001 transitions. [2024-11-20 22:44:16,458 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:16,458 INFO L425 stractBuchiCegarLoop]: Abstraction has 26501 states and 49001 transitions. [2024-11-20 22:44:16,458 INFO L332 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2024-11-20 22:44:16,459 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26501 states and 49001 transitions. [2024-11-20 22:44:16,529 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:16,529 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:16,529 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:16,532 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:16,533 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:16,533 INFO L745 eck$LassoCheckResult]: Stem: 685550#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 685551#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 686592#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 686137#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 686138#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 685952#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 685953#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 687181#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 686391#L3030 assume !(0 == getOrigin_~person#1); 686392#L3034 assume !(1 == getOrigin_~person#1); 686558#L3038 assume !(2 == getOrigin_~person#1); 686018#L3042 assume !(3 == getOrigin_~person#1); 686019#L3046 assume !(4 == getOrigin_~person#1); 686969#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 685575#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 685576#L2208 assume !(0 == initPersonOnFloor_~floor#1); 686823#L2235 assume 1 == initPersonOnFloor_~floor#1; 686612#L2236 assume !(0 == initPersonOnFloor_~person#1); 686613#L2239 assume !(1 == initPersonOnFloor_~person#1); 686703#L2242 assume !(2 == initPersonOnFloor_~person#1); 686704#L2245 assume !(3 == initPersonOnFloor_~person#1); 687375#L2248 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 685839#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 685840#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 686774#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 687279#L2000 assume !(0 == callOnFloor_~floorID#1); 687280#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 686118#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 687565#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 687564#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 687560#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 687559#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 687558#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 687555#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 687553#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 687552#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 686388#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 685594#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 685451#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 685452#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 685786#L2000-2 assume !(0 == callOnFloor_~floorID#1); 686454#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 686053#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 686054#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 687528#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 687527#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 687526#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 687525#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 687509#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 686721#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 686539#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 686540#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 687523#L1034 assume !(0 != timeShift_~tmp___9~2#1); 687213#L1125 assume !(1 == ~doorState~0); 685366#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 685367#L476 assume !(1 == stopRequestedInDirection_~dir#1); 687155#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 686639#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 685461#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 685462#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 687512#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 687524#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 685454#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 685455#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 686982#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 685609#L852-2 assume !(1 == ~currentHeading~0); 685610#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 685704#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 686493#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 686673#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 686780#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 686781#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 687035#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 686160#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 685702#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 686274#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 685701#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 687415#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 687416#L1637-2 [2024-11-20 22:44:16,533 INFO L747 eck$LassoCheckResult]: Loop: 687416#L1637-2 assume !false; 694202#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 694201#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 694200#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 694199#L1645 assume 1 != cleanup_~tmp___0~6#1; 694198#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 694197#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 694196#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 694195#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 694193#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 694192#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 694190#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 694175#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 694171#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 694160#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 694159#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 694158#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 693837#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 693838#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 696306#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 697737#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 697738#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 697746#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 697744#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 697739#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 693840#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 693841#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 687675#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 687676#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 690503#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 687669#L645-2 assume !(0 == ~currentFloorID~0); 687670#L651-2 assume ~currentFloorID~0 > 0; 690440#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 687668#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 687665#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 687666#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 689831#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 689676#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 689669#L852-3 assume !(1 == ~currentHeading~0); 689662#L862-9 assume !(0 == ~currentFloorID~0); 689652#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 689647#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 689646#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 689645#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 689643#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 689644#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 689642#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 689552#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 687906#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 687873#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 687872#L1637-2 assume !false; 687871#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 687870#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 687869#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 687868#L1645 assume 1 != cleanup_~tmp___0~6#1; 687867#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 687866#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 687865#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 687863#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 687860#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 687862#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 687852#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 687836#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 687829#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 687818#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 687817#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 687815#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 687816#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 687813#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 687812#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 687811#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 687810#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 687808#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 687807#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 687806#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 687311#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 686537#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 686538#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 685612#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 685388#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 686163#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 685487#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 685489#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 693674#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 685985#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 685696#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 686056#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 686057#L852-5 assume !(1 == ~currentHeading~0); 686741#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 686207#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 686718#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 686719#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 694222#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 694221#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 694220#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 694219#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 694217#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 694211#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 694204#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 694203#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 687416#L1637-2 [2024-11-20 22:44:16,534 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:16,534 INFO L85 PathProgramCache]: Analyzing trace with hash 1221950017, now seen corresponding path program 1 times [2024-11-20 22:44:16,534 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:16,534 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1227143607] [2024-11-20 22:44:16,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:16,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:16,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:16,814 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:16,814 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:16,815 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1227143607] [2024-11-20 22:44:16,815 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1227143607] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:16,815 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:16,815 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:16,815 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [249313678] [2024-11-20 22:44:16,815 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:16,816 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:16,816 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:16,816 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 4 times [2024-11-20 22:44:16,816 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:16,816 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [382998284] [2024-11-20 22:44:16,817 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:16,817 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:16,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:16,927 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:16,927 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:16,928 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [382998284] [2024-11-20 22:44:16,928 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [382998284] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:16,928 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:16,928 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:16,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1563529373] [2024-11-20 22:44:16,929 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:16,929 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:16,929 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:16,930 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:44:16,930 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:44:16,930 INFO L87 Difference]: Start difference. First operand 26501 states and 49001 transitions. cyclomatic complexity: 22501 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:17,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:17,111 INFO L93 Difference]: Finished difference Result 26529 states and 49038 transitions. [2024-11-20 22:44:17,111 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26529 states and 49038 transitions. [2024-11-20 22:44:17,223 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:17,299 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26529 states to 26529 states and 49038 transitions. [2024-11-20 22:44:17,299 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26529 [2024-11-20 22:44:17,323 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26529 [2024-11-20 22:44:17,323 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26529 states and 49038 transitions. [2024-11-20 22:44:17,343 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:17,343 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26529 states and 49038 transitions. [2024-11-20 22:44:17,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26529 states and 49038 transitions. [2024-11-20 22:44:17,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26529 to 26501. [2024-11-20 22:44:17,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26501 states, 26501 states have (on average 1.8486094864344742) internal successors, (48990), 26500 states have internal predecessors, (48990), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:17,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26501 states to 26501 states and 48990 transitions. [2024-11-20 22:44:17,665 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26501 states and 48990 transitions. [2024-11-20 22:44:17,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:17,666 INFO L425 stractBuchiCegarLoop]: Abstraction has 26501 states and 48990 transitions. [2024-11-20 22:44:17,666 INFO L332 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2024-11-20 22:44:17,666 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26501 states and 48990 transitions. [2024-11-20 22:44:17,753 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:17,753 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:17,753 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:17,758 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:17,758 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:17,758 INFO L745 eck$LassoCheckResult]: Stem: 738593#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 738594#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 739640#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 739176#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 739177#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 738995#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 738996#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 740243#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 739429#L3030 assume !(0 == getOrigin_~person#1); 739430#L3034 assume !(1 == getOrigin_~person#1); 739604#L3038 assume !(2 == getOrigin_~person#1); 739058#L3042 assume !(3 == getOrigin_~person#1); 739059#L3046 assume !(4 == getOrigin_~person#1); 740033#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 738616#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 738617#L2208 assume !(0 == initPersonOnFloor_~floor#1); 739881#L2235 assume 1 == initPersonOnFloor_~floor#1; 739659#L2236 assume !(0 == initPersonOnFloor_~person#1); 739660#L2239 assume !(1 == initPersonOnFloor_~person#1); 739755#L2242 assume !(2 == initPersonOnFloor_~person#1); 739756#L2245 assume !(3 == initPersonOnFloor_~person#1); 740440#L2248 assume !(4 == initPersonOnFloor_~person#1); 740468#L2251 assume !(5 == initPersonOnFloor_~person#1); 738882#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 738883#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 739831#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 740350#L2000 assume !(0 == callOnFloor_~floorID#1); 740352#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 738926#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 738927#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 738988#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 738989#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 740656#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 740653#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 740652#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 739998#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 739999#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 739425#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 738637#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 738495#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 738496#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 738830#L2000-2 assume !(0 == callOnFloor_~floorID#1); 739496#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 739092#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 739093#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 740625#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 740624#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 740623#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 740622#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 740603#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 739773#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 739585#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 739587#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 740619#L1034 assume !(0 != timeShift_~tmp___9~2#1); 740282#L1125 assume !(1 == ~doorState~0); 738408#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 738409#L476 assume !(1 == stopRequestedInDirection_~dir#1); 740218#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 739686#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 738502#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 738503#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 740606#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 740621#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 738498#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 738499#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 740045#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 738650#L852-2 assume !(1 == ~currentHeading~0); 738651#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 738748#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 739538#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 739722#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 739837#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 739838#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 740093#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 739200#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 738746#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 739315#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 738745#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 740494#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 740495#L1637-2 [2024-11-20 22:44:17,759 INFO L747 eck$LassoCheckResult]: Loop: 740495#L1637-2 assume !false; 753185#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 753072#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 753073#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 747181#L1645 assume 1 != cleanup_~tmp___0~6#1; 747182#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 747173#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 747174#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 747166#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 747168#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 747163#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 747161#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 747143#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 747136#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 747126#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 747121#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 747122#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 747096#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 747097#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 759156#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 759118#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 759119#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 759124#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 759122#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 759120#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 759121#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 759109#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 741030#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 741028#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 741029#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 741024#L645-2 assume !(0 == ~currentFloorID~0); 741022#L651-2 assume ~currentFloorID~0 > 0; 741023#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 738851#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 738852#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 742962#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 742941#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 742935#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 742929#L852-3 assume !(1 == ~currentHeading~0); 742922#L862-9 assume !(0 == ~currentFloorID~0); 742912#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 742907#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 742902#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 742901#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 742900#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 742898#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 742886#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 742887#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 741156#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 741157#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 741121#L1637-2 assume !false; 741122#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 741117#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 741118#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 741113#L1645 assume 1 != cleanup_~tmp___0~6#1; 741114#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 741106#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 741107#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 741100#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 741102#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 741095#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 741096#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 741075#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 741076#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 741054#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 741055#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 741050#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 741051#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 741048#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 741047#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 741046#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 741045#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 741043#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 741042#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 741040#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 741039#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 741038#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 741037#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 738653#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 738654#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 742905#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 742904#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 742903#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 742871#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 739028#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 738740#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 746883#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 739794#L852-5 assume !(1 == ~currentHeading~0); 739796#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 739247#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 739770#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 739771#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 753216#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 753215#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 753214#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 753213#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 753209#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 753210#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 753188#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 753189#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 740495#L1637-2 [2024-11-20 22:44:17,759 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:17,759 INFO L85 PathProgramCache]: Analyzing trace with hash -1791129757, now seen corresponding path program 1 times [2024-11-20 22:44:17,759 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:17,760 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1504474307] [2024-11-20 22:44:17,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:17,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:17,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:17,847 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:17,847 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:17,848 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1504474307] [2024-11-20 22:44:17,849 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1504474307] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:17,849 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:17,849 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:17,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1279587118] [2024-11-20 22:44:17,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:17,850 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:17,851 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:17,852 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 5 times [2024-11-20 22:44:17,852 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:17,852 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [19574307] [2024-11-20 22:44:17,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:17,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:17,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:17,964 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:17,965 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:17,965 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [19574307] [2024-11-20 22:44:17,965 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [19574307] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:17,965 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:17,965 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:17,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1449422115] [2024-11-20 22:44:17,966 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:17,966 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:17,966 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:17,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:44:17,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:44:17,967 INFO L87 Difference]: Start difference. First operand 26501 states and 48990 transitions. cyclomatic complexity: 22490 Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:18,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:18,288 INFO L93 Difference]: Finished difference Result 26501 states and 48989 transitions. [2024-11-20 22:44:18,288 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26501 states and 48989 transitions. [2024-11-20 22:44:18,395 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:18,461 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26501 states to 26501 states and 48989 transitions. [2024-11-20 22:44:18,461 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26501 [2024-11-20 22:44:18,481 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26501 [2024-11-20 22:44:18,481 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26501 states and 48989 transitions. [2024-11-20 22:44:18,497 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:18,498 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26501 states and 48989 transitions. [2024-11-20 22:44:18,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26501 states and 48989 transitions. [2024-11-20 22:44:18,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26501 to 26501. [2024-11-20 22:44:18,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26501 states, 26501 states have (on average 1.848571752009358) internal successors, (48989), 26500 states have internal predecessors, (48989), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:18,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26501 states to 26501 states and 48989 transitions. [2024-11-20 22:44:18,728 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26501 states and 48989 transitions. [2024-11-20 22:44:18,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:44:18,729 INFO L425 stractBuchiCegarLoop]: Abstraction has 26501 states and 48989 transitions. [2024-11-20 22:44:18,729 INFO L332 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2024-11-20 22:44:18,729 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26501 states and 48989 transitions. [2024-11-20 22:44:18,797 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:18,797 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:18,797 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:18,801 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:18,801 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:18,802 INFO L745 eck$LassoCheckResult]: Stem: 791605#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 791606#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 792650#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 792191#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 792192#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 792008#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 792009#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 793234#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 792448#L3030 assume !(0 == getOrigin_~person#1); 792449#L3034 assume !(1 == getOrigin_~person#1); 792613#L3038 assume !(2 == getOrigin_~person#1); 792071#L3042 assume !(3 == getOrigin_~person#1); 792072#L3046 assume !(4 == getOrigin_~person#1); 793023#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 791630#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 791631#L2208 assume !(0 == initPersonOnFloor_~floor#1); 792876#L2235 assume 1 == initPersonOnFloor_~floor#1; 792668#L2236 assume !(0 == initPersonOnFloor_~person#1); 792669#L2239 assume !(1 == initPersonOnFloor_~person#1); 792758#L2242 assume !(2 == initPersonOnFloor_~person#1); 792759#L2245 assume !(3 == initPersonOnFloor_~person#1); 793435#L2248 assume !(4 == initPersonOnFloor_~person#1); 793457#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 791896#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 791897#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 792828#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 793332#L2000 assume !(0 == callOnFloor_~floorID#1); 793333#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 792172#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 793674#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 793673#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 793670#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 793668#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 793664#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 793660#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 793656#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 793650#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 793635#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 793625#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 793623#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 793619#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 793618#L2000-2 assume !(0 == callOnFloor_~floorID#1); 793617#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 793613#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 793612#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 793611#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 793610#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 793609#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 793608#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 793589#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 792776#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 792595#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 792597#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 793605#L1034 assume !(0 != timeShift_~tmp___9~2#1); 793267#L1125 assume !(1 == ~doorState~0); 791422#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 791423#L476 assume !(1 == stopRequestedInDirection_~dir#1); 793210#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 792693#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 791517#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 791518#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 793592#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 793607#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 791513#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 791514#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 793034#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 791664#L852-2 assume !(1 == ~currentHeading~0); 791665#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 791761#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 792549#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 792725#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 792834#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 792835#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 793087#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 793496#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 799754#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 799753#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 792674#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 792675#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 793484#L1637-2 [2024-11-20 22:44:18,802 INFO L747 eck$LassoCheckResult]: Loop: 793484#L1637-2 assume !false; 805842#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 805843#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 805838#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 805839#L1645 assume 1 != cleanup_~tmp___0~6#1; 800191#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 800192#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 800186#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 800187#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 800181#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 800183#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 814233#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 814230#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 814229#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 814222#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 814221#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 814220#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 814219#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 814218#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 814211#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 814208#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 814209#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 814213#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 814210#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 814207#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 814205#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 814204#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 796099#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 796098#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 796096#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 796095#L645-2 assume !(0 == ~currentFloorID~0); 796094#L651-2 assume ~currentFloorID~0 > 0; 796093#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 796092#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 796087#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 796086#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 796059#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 796050#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 796043#L852-3 assume !(1 == ~currentHeading~0); 796036#L862-9 assume !(0 == ~currentFloorID~0); 796026#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 796021#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 796022#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 800095#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 796013#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 796007#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 795998#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 795999#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 794289#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 794290#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 794253#L1637-2 assume !false; 794254#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 794248#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 794249#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 794229#L1645 assume 1 != cleanup_~tmp___0~6#1; 794230#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 794215#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 794216#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 794210#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 794212#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 794205#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 794206#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 794198#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 794199#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 794175#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 794176#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 794165#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 794166#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 794163#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 794162#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 794161#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 794160#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 794158#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 794157#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 794155#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 794154#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 794153#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 794152#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 791667#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 791668#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 799751#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 791543#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 791545#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 799750#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 792041#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 791754#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 792109#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 792110#L852-5 assume !(1 == ~currentHeading~0); 792797#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 792263#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 792774#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 792775#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 805876#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 806282#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 806281#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 806279#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 806280#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 805856#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 805850#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 805846#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 793484#L1637-2 [2024-11-20 22:44:18,803 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:18,803 INFO L85 PathProgramCache]: Analyzing trace with hash 1242920289, now seen corresponding path program 1 times [2024-11-20 22:44:18,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:18,803 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1645330835] [2024-11-20 22:44:18,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:18,803 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:18,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:18,940 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:18,940 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:18,940 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1645330835] [2024-11-20 22:44:18,941 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1645330835] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:18,941 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:18,941 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:18,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [404152483] [2024-11-20 22:44:18,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:18,941 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:18,942 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:18,942 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 6 times [2024-11-20 22:44:18,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:18,942 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [754074229] [2024-11-20 22:44:18,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:18,942 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:18,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:19,023 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:19,024 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:19,024 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [754074229] [2024-11-20 22:44:19,024 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [754074229] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:19,024 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:19,024 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:19,024 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1655380287] [2024-11-20 22:44:19,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:19,025 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:19,025 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:19,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-20 22:44:19,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-20 22:44:19,025 INFO L87 Difference]: Start difference. First operand 26501 states and 48989 transitions. cyclomatic complexity: 22489 Second operand has 7 states, 7 states have (on average 11.285714285714286) internal successors, (79), 7 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:19,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:19,421 INFO L93 Difference]: Finished difference Result 26505 states and 48992 transitions. [2024-11-20 22:44:19,421 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26505 states and 48992 transitions. [2024-11-20 22:44:19,513 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:19,584 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26505 states to 26505 states and 48992 transitions. [2024-11-20 22:44:19,584 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26505 [2024-11-20 22:44:19,602 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26505 [2024-11-20 22:44:19,603 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26505 states and 48992 transitions. [2024-11-20 22:44:19,619 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:19,619 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26505 states and 48992 transitions. [2024-11-20 22:44:19,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26505 states and 48992 transitions. [2024-11-20 22:44:19,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26505 to 26505. [2024-11-20 22:44:19,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26505 states, 26505 states have (on average 1.8484059611394077) internal successors, (48992), 26504 states have internal predecessors, (48992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:19,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26505 states to 26505 states and 48992 transitions. [2024-11-20 22:44:19,845 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26505 states and 48992 transitions. [2024-11-20 22:44:19,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-20 22:44:19,846 INFO L425 stractBuchiCegarLoop]: Abstraction has 26505 states and 48992 transitions. [2024-11-20 22:44:19,846 INFO L332 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2024-11-20 22:44:19,846 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26505 states and 48992 transitions. [2024-11-20 22:44:19,915 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:19,915 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:19,915 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:19,918 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:19,918 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:19,919 INFO L745 eck$LassoCheckResult]: Stem: 844626#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 844627#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 845669#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 845213#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 845214#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 845033#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 845034#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 846250#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 845467#L3030 assume !(0 == getOrigin_~person#1); 845468#L3034 assume !(1 == getOrigin_~person#1); 845637#L3038 assume !(2 == getOrigin_~person#1); 845096#L3042 assume !(3 == getOrigin_~person#1); 845097#L3046 assume !(4 == getOrigin_~person#1); 846046#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 844650#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 844651#L2208 assume !(0 == initPersonOnFloor_~floor#1); 845896#L2235 assume 1 == initPersonOnFloor_~floor#1; 845689#L2236 assume !(0 == initPersonOnFloor_~person#1); 845690#L2239 assume !(1 == initPersonOnFloor_~person#1); 845779#L2242 assume !(2 == initPersonOnFloor_~person#1); 845780#L2245 assume !(3 == initPersonOnFloor_~person#1); 846451#L2248 assume !(4 == initPersonOnFloor_~person#1); 846477#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 844918#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 844919#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 845851#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 846007#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 846353#L2000 assume !(0 == callOnFloor_~floorID#1); 846354#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 845194#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 846659#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 846658#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 846657#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 846655#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 846653#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 846632#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 846644#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 846638#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 846622#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 846613#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 846609#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 846607#L3164-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 846602#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 846601#L2000-2 assume !(0 == callOnFloor_~floorID#1); 846600#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 846596#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 846595#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 846594#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 846593#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 846592#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 846591#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 846572#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 845798#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 845618#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 845619#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 846589#L1034 assume !(0 != timeShift_~tmp___9~2#1); 846284#L1125 assume !(1 == ~doorState~0); 844442#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 844443#L476 assume !(1 == stopRequestedInDirection_~dir#1); 846226#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 845714#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 844536#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 844537#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 846574#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 846590#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 844529#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 844530#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 846057#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 844684#L852-2 assume !(1 == ~currentHeading~0); 844685#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 844781#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 845572#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 845747#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 845856#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 845857#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 846106#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 845237#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 844779#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 845350#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 844778#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 845696#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 846496#L1637-2 [2024-11-20 22:44:19,919 INFO L747 eck$LassoCheckResult]: Loop: 846496#L1637-2 assume !false; 857756#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 857664#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 857665#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 857660#L1645 assume 1 != cleanup_~tmp___0~6#1; 857661#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 854766#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 854767#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 853161#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 853163#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 868348#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 868346#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 868339#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 868337#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 868315#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 868313#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 868311#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 868309#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 868306#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 868305#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 868303#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 868304#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 846271#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 844972#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 845265#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 846430#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 849204#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 849203#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 849202#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 849200#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 849201#L645-2 assume !(0 == ~currentFloorID~0); 849258#L651-2 assume ~currentFloorID~0 > 0; 849256#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 849257#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 849259#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 849255#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 849194#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 849071#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 849069#L852-3 assume !(1 == ~currentHeading~0); 849013#L862-9 assume !(0 == ~currentFloorID~0); 848964#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 848645#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 848642#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 848639#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 848636#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 848637#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 848638#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 848623#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 848618#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 847154#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 847155#L1637-2 assume !false; 847148#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 847149#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 847141#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 847142#L1645 assume 1 != cleanup_~tmp___0~6#1; 847132#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 847133#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 847127#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 847128#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 852265#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 853120#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 853118#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 847087#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 847088#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 847069#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 847070#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 847043#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 847044#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 847041#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 847040#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 847039#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 847038#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 847036#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 847035#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 847013#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 847015#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 847063#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 846321#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 844687#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 844688#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 847963#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 847960#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 847956#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 847953#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 845068#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 845069#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 852560#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 852561#L852-5 assume !(1 == ~currentHeading~0); 852694#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 846584#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 845795#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 845796#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 859230#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 859226#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 859227#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 859309#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 859218#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 859219#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 857764#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 857765#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 846496#L1637-2 [2024-11-20 22:44:19,920 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:19,920 INFO L85 PathProgramCache]: Analyzing trace with hash 48713513, now seen corresponding path program 1 times [2024-11-20 22:44:19,920 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:19,920 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1331470520] [2024-11-20 22:44:19,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:19,920 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:19,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:19,976 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:19,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:19,977 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1331470520] [2024-11-20 22:44:19,977 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1331470520] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:19,977 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:19,977 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:19,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1842888871] [2024-11-20 22:44:19,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:19,978 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:19,978 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:19,978 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 7 times [2024-11-20 22:44:19,978 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:19,978 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1142353501] [2024-11-20 22:44:19,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:19,979 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:19,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:20,059 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:20,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:20,059 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1142353501] [2024-11-20 22:44:20,059 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1142353501] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:20,059 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:20,059 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:20,060 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1186225838] [2024-11-20 22:44:20,060 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:20,060 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:20,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:20,060 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:44:20,060 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:44:20,061 INFO L87 Difference]: Start difference. First operand 26505 states and 48992 transitions. cyclomatic complexity: 22488 Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:20,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:20,169 INFO L93 Difference]: Finished difference Result 26473 states and 48940 transitions. [2024-11-20 22:44:20,169 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26473 states and 48940 transitions. [2024-11-20 22:44:20,618 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:20,701 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26473 states to 26473 states and 48940 transitions. [2024-11-20 22:44:20,701 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26473 [2024-11-20 22:44:20,722 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26473 [2024-11-20 22:44:20,723 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26473 states and 48940 transitions. [2024-11-20 22:44:20,740 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:20,740 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26473 states and 48940 transitions. [2024-11-20 22:44:20,753 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26473 states and 48940 transitions. [2024-11-20 22:44:20,900 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26473 to 26473. [2024-11-20 22:44:20,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26473 states, 26473 states have (on average 1.8486760095191328) internal successors, (48940), 26472 states have internal predecessors, (48940), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:20,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26473 states to 26473 states and 48940 transitions. [2024-11-20 22:44:20,962 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26473 states and 48940 transitions. [2024-11-20 22:44:20,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:44:20,962 INFO L425 stractBuchiCegarLoop]: Abstraction has 26473 states and 48940 transitions. [2024-11-20 22:44:20,962 INFO L332 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2024-11-20 22:44:20,963 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26473 states and 48940 transitions. [2024-11-20 22:44:21,026 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:21,026 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:21,026 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:21,029 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:21,029 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:21,030 INFO L745 eck$LassoCheckResult]: Stem: 897613#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 897614#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 898652#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 898198#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 898199#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 898014#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 898015#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 899236#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 898446#L3030 assume !(0 == getOrigin_~person#1); 898447#L3034 assume !(1 == getOrigin_~person#1); 898618#L3038 assume !(2 == getOrigin_~person#1); 898081#L3042 assume !(3 == getOrigin_~person#1); 898082#L3046 assume !(4 == getOrigin_~person#1); 899035#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 897639#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 897640#L2208 assume !(0 == initPersonOnFloor_~floor#1); 898884#L2235 assume 1 == initPersonOnFloor_~floor#1; 898672#L2236 assume !(0 == initPersonOnFloor_~person#1); 898673#L2239 assume !(1 == initPersonOnFloor_~person#1); 898761#L2242 assume !(2 == initPersonOnFloor_~person#1); 898762#L2245 assume !(3 == initPersonOnFloor_~person#1); 899426#L2248 assume !(4 == initPersonOnFloor_~person#1); 899452#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 897902#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 897903#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 898835#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 898992#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 899345#L2000 assume !(0 == callOnFloor_~floorID#1); 899346#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 898179#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 899607#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 899606#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 899605#L3030-1 assume !(0 == getOrigin_~person#1); 899604#L3034-1 assume !(1 == getOrigin_~person#1); 899603#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 899602#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 899601#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 899600#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 898999#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 899000#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 898442#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 897658#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 899559#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 899591#L3164-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 899587#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 899586#L2000-2 assume !(0 == callOnFloor_~floorID#1); 899585#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 899581#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 899580#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 899579#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 899578#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 899577#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 899576#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 899556#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 898779#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 898601#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 898603#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 899574#L1034 assume !(0 != timeShift_~tmp___9~2#1); 899272#L1125 assume !(1 == ~doorState~0); 897430#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 897431#L476 assume !(1 == stopRequestedInDirection_~dir#1); 899212#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 898697#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 897524#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 897525#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 899558#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 899575#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 897517#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 897518#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 899048#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 897673#L852-2 assume !(1 == ~currentHeading~0); 897674#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 897767#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 898554#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 898729#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 898840#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 898841#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 899099#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 898222#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 897765#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 897864#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 897764#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 898678#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 899471#L1637-2 [2024-11-20 22:44:21,030 INFO L747 eck$LassoCheckResult]: Loop: 899471#L1637-2 assume !false; 923598#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 923597#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 923596#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 906304#L1645 assume 1 != cleanup_~tmp___0~6#1; 906302#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 906301#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 906300#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 905914#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 905915#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 911779#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 911752#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 911745#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 911716#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 911693#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 911690#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 911687#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 911684#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 911681#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 911679#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 914130#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 914129#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 914126#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 914124#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 914122#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 914121#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 914120#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 901842#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 901841#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 901839#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 901838#L645-2 assume !(0 == ~currentFloorID~0); 901837#L651-2 assume ~currentFloorID~0 > 0; 901836#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 901835#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 901834#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 901833#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 901801#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 901791#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 901786#L852-3 assume !(1 == ~currentHeading~0); 901779#L862-9 assume !(0 == ~currentFloorID~0); 901769#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 901764#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 901765#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 906148#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 906145#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 906146#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 906147#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 906137#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 906131#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 906130#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 906129#L1637-2 assume !false; 900071#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 900072#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 900067#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 900068#L1645 assume 1 != cleanup_~tmp___0~6#1; 900064#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 900062#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 900060#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 900061#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 905900#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 900051#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 900052#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 906091#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 906090#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 900013#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 900012#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 900010#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 900011#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 900008#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 900007#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 900006#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 900005#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 900003#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 900002#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 900000#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 899999#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 899998#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 899997#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 897676#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 897677#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 898225#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 897550#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 897552#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 905758#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 898047#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 898048#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 898116#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 898117#L852-5 assume !(1 == ~currentHeading~0); 898800#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 898267#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 898776#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 898777#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 921985#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 905989#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 905990#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 923611#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 923610#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 923607#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 923600#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 923599#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 899471#L1637-2 [2024-11-20 22:44:21,031 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:21,031 INFO L85 PathProgramCache]: Analyzing trace with hash 1146195918, now seen corresponding path program 1 times [2024-11-20 22:44:21,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:21,031 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1545789882] [2024-11-20 22:44:21,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:21,031 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:21,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:21,110 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:21,111 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:21,111 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1545789882] [2024-11-20 22:44:21,111 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1545789882] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:21,111 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:21,111 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:21,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1321136504] [2024-11-20 22:44:21,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:21,112 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:21,112 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:21,112 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 8 times [2024-11-20 22:44:21,112 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:21,112 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [154595109] [2024-11-20 22:44:21,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:21,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:21,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:21,214 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:21,214 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:21,214 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [154595109] [2024-11-20 22:44:21,215 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [154595109] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:21,215 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:21,215 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:21,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [734461935] [2024-11-20 22:44:21,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:21,216 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:21,216 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:21,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:44:21,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:44:21,216 INFO L87 Difference]: Start difference. First operand 26473 states and 48940 transitions. cyclomatic complexity: 22468 Second operand has 5 states, 5 states have (on average 16.6) internal successors, (83), 5 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:21,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:21,325 INFO L93 Difference]: Finished difference Result 26461 states and 48922 transitions. [2024-11-20 22:44:21,325 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26461 states and 48922 transitions. [2024-11-20 22:44:21,428 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:21,508 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26461 states to 26461 states and 48922 transitions. [2024-11-20 22:44:21,508 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26461 [2024-11-20 22:44:21,845 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26461 [2024-11-20 22:44:21,845 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26461 states and 48922 transitions. [2024-11-20 22:44:21,859 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:21,860 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26461 states and 48922 transitions. [2024-11-20 22:44:21,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26461 states and 48922 transitions. [2024-11-20 22:44:22,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26461 to 26461. [2024-11-20 22:44:22,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26461 states, 26461 states have (on average 1.8488341332527116) internal successors, (48922), 26460 states have internal predecessors, (48922), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:22,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26461 states to 26461 states and 48922 transitions. [2024-11-20 22:44:22,166 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26461 states and 48922 transitions. [2024-11-20 22:44:22,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:44:22,167 INFO L425 stractBuchiCegarLoop]: Abstraction has 26461 states and 48922 transitions. [2024-11-20 22:44:22,167 INFO L332 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2024-11-20 22:44:22,167 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26461 states and 48922 transitions. [2024-11-20 22:44:22,254 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:22,254 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:22,254 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:22,258 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:22,258 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:22,258 INFO L745 eck$LassoCheckResult]: Stem: 950558#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 950559#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 951583#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 951143#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 951144#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 950967#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 950968#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 952160#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 951385#L3030 assume !(0 == getOrigin_~person#1); 951386#L3034 assume !(1 == getOrigin_~person#1); 951552#L3038 assume !(2 == getOrigin_~person#1); 951028#L3042 assume !(3 == getOrigin_~person#1); 951029#L3046 assume !(4 == getOrigin_~person#1); 951957#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 950583#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 950584#L2208 assume !(0 == initPersonOnFloor_~floor#1); 951817#L2235 assume 1 == initPersonOnFloor_~floor#1; 951603#L2236 assume !(0 == initPersonOnFloor_~person#1); 951604#L2239 assume !(1 == initPersonOnFloor_~person#1); 951697#L2242 assume !(2 == initPersonOnFloor_~person#1); 951698#L2245 assume !(3 == initPersonOnFloor_~person#1); 952352#L2248 assume !(4 == initPersonOnFloor_~person#1); 952369#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 950850#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 950851#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 951770#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 951921#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 952266#L2000 assume !(0 == callOnFloor_~floorID#1); 952267#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 951124#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 952521#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 950960#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 950961#L3030-1 assume !(0 == getOrigin_~person#1); 952520#L3034-1 assume !(1 == getOrigin_~person#1); 952519#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 950904#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 950793#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 950794#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 952516#L2262-1 assume !(2 == initPersonOnFloor_~floor#1); 951454#L2289-1 assume !(3 == initPersonOnFloor_~floor#1); 951456#L2316-2 assume !(4 == initPersonOnFloor_~floor#1); 952511#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 952510#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 952509#L3164-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 952505#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 952504#L2000-2 assume !(0 == callOnFloor_~floorID#1); 952503#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 952499#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 952498#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 952497#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 952496#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 952495#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 952494#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 952476#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 951716#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 951534#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 951535#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 952492#L1034 assume !(0 != timeShift_~tmp___9~2#1); 952196#L1125 assume !(1 == ~doorState~0); 950378#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 950379#L476 assume !(1 == stopRequestedInDirection_~dir#1); 952140#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 951629#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 950469#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 950470#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 952478#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 952493#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 950462#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 950463#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 951970#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 950618#L852-2 assume !(1 == ~currentHeading~0); 950619#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 950714#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 951487#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 951662#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 951775#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 951776#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 952021#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 951167#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 950712#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 950812#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 950711#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 951609#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 952390#L1637-2 [2024-11-20 22:44:22,259 INFO L747 eck$LassoCheckResult]: Loop: 952390#L1637-2 assume !false; 959077#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 959078#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 959073#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 959074#L1645 assume 1 != cleanup_~tmp___0~6#1; 959069#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 959070#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 959065#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 959066#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 959059#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 959061#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 969074#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 969067#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 969065#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 969043#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 969041#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 969039#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 969037#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 969033#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 969028#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 969024#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 969025#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 969030#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 969027#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 969026#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 969023#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 969020#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 954555#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 951532#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 951533#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 950621#L645-2 assume !(0 == ~currentFloorID~0); 950622#L651-2 assume ~currentFloorID~0 > 0; 954941#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 954940#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 952407#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 952408#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 954772#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 954773#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 955012#L852-3 assume !(1 == ~currentHeading~0); 955009#L862-9 assume !(0 == ~currentFloorID~0); 955001#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 954621#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 954620#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 954619#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 954616#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 954617#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 954618#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 952959#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 952950#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 952917#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 952916#L1637-2 assume !false; 952915#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 952914#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 952913#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 952912#L1645 assume 1 != cleanup_~tmp___0~6#1; 952911#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 952910#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 952909#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 952907#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 952905#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 952904#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 952901#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 952883#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 952884#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 952863#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 952864#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 952859#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 952860#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 952857#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 952856#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 952855#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 952854#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 952851#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 952849#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 952832#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 952831#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 952830#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 952816#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 952803#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 952791#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 952757#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 952755#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 952753#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 952751#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 952750#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 952731#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 952730#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 952729#L852-5 assume !(1 == ~currentHeading~0); 952728#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 951212#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 951713#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 951714#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 962197#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 962198#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 962194#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 959095#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 959088#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 959084#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 959085#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 959081#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 952390#L1637-2 [2024-11-20 22:44:22,259 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:22,259 INFO L85 PathProgramCache]: Analyzing trace with hash -883037106, now seen corresponding path program 1 times [2024-11-20 22:44:22,260 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:22,260 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1762551561] [2024-11-20 22:44:22,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:22,260 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:22,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:22,353 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:22,353 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:22,353 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1762551561] [2024-11-20 22:44:22,353 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1762551561] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:22,353 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:22,353 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:22,354 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [714772664] [2024-11-20 22:44:22,354 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:22,354 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:22,354 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:22,354 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 3 times [2024-11-20 22:44:22,354 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:22,354 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1732269275] [2024-11-20 22:44:22,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:22,355 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:22,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:22,455 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:22,455 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:22,455 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1732269275] [2024-11-20 22:44:22,455 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1732269275] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:22,455 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:22,456 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:22,456 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1420110389] [2024-11-20 22:44:22,456 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:22,457 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:22,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:22,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:44:22,458 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:44:22,458 INFO L87 Difference]: Start difference. First operand 26461 states and 48922 transitions. cyclomatic complexity: 22462 Second operand has 4 states, 4 states have (on average 20.75) internal successors, (83), 4 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:22,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:22,609 INFO L93 Difference]: Finished difference Result 26433 states and 48880 transitions. [2024-11-20 22:44:22,610 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26433 states and 48880 transitions. [2024-11-20 22:44:22,747 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:22,835 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26433 states to 26433 states and 48880 transitions. [2024-11-20 22:44:22,835 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26433 [2024-11-20 22:44:22,859 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26433 [2024-11-20 22:44:22,859 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26433 states and 48880 transitions. [2024-11-20 22:44:22,879 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:22,879 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48880 transitions. [2024-11-20 22:44:22,895 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26433 states and 48880 transitions. [2024-11-20 22:44:23,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26433 to 26433. [2024-11-20 22:44:23,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26433 states, 26433 states have (on average 1.849203646956456) internal successors, (48880), 26432 states have internal predecessors, (48880), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:23,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26433 states to 26433 states and 48880 transitions. [2024-11-20 22:44:23,590 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48880 transitions. [2024-11-20 22:44:23,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:23,591 INFO L425 stractBuchiCegarLoop]: Abstraction has 26433 states and 48880 transitions. [2024-11-20 22:44:23,591 INFO L332 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2024-11-20 22:44:23,591 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26433 states and 48880 transitions. [2024-11-20 22:44:23,652 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:23,652 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:23,652 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:23,654 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:23,654 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:23,655 INFO L745 eck$LassoCheckResult]: Stem: 1003467#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1003468#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1004488#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1004054#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1004055#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1003873#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1003874#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1005059#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1004296#L3030 assume !(0 == getOrigin_~person#1); 1004297#L3034 assume !(1 == getOrigin_~person#1); 1004452#L3038 assume !(2 == getOrigin_~person#1); 1003938#L3042 assume !(3 == getOrigin_~person#1); 1003939#L3046 assume !(4 == getOrigin_~person#1); 1004861#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1003490#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1003491#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1004720#L2235 assume 1 == initPersonOnFloor_~floor#1; 1004507#L2236 assume !(0 == initPersonOnFloor_~person#1); 1004508#L2239 assume !(1 == initPersonOnFloor_~person#1); 1004599#L2242 assume !(2 == initPersonOnFloor_~person#1); 1004600#L2245 assume !(3 == initPersonOnFloor_~person#1); 1005243#L2248 assume !(4 == initPersonOnFloor_~person#1); 1005270#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1003760#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1003761#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1004672#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1004822#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1005156#L2000 assume !(0 == callOnFloor_~floorID#1); 1005158#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1003803#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1003804#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1003866#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1003867#L3030-1 assume !(0 == getOrigin_~person#1); 1005294#L3034-1 assume !(1 == getOrigin_~person#1); 1005295#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1003815#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1003698#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1003699#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1005227#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1005228#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1005112#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1005113#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1005429#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1005428#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1005427#L3164-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1003703#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1003704#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1005423#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1005419#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1005418#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1005417#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1005416#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1005415#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1005414#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1005394#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1004617#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1004438#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1004439#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1005412#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1005092#L1125 assume !(1 == ~doorState~0); 1003283#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1003284#L476 assume !(1 == stopRequestedInDirection_~dir#1); 1005036#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1004534#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1003375#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1003376#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1005398#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1005413#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1003371#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1003372#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1004873#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1003525#L852-2 assume !(1 == ~currentHeading~0); 1003526#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1003621#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1004394#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1004567#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1004678#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1004679#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1004918#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1004077#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1003619#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1004190#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1003618#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1005298#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1005299#L1637-2 [2024-11-20 22:44:23,655 INFO L747 eck$LassoCheckResult]: Loop: 1005299#L1637-2 assume !false; 1018112#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1018111#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1018110#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1018109#L1645 assume 1 != cleanup_~tmp___0~6#1; 1018108#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1018107#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1018106#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1018104#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1018102#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1018101#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1018099#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1018096#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1011935#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1011925#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1011920#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1011921#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1016373#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1016374#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1018076#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1020771#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1020772#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1020781#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1020779#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1020773#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1020611#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1020603#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1006282#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1006281#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1006279#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1006278#L645-2 assume !(0 == ~currentFloorID~0); 1006277#L651-2 assume ~currentFloorID~0 > 0; 1006276#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1006275#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1006274#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1006273#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1006228#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1006221#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1005883#L852-3 assume !(1 == ~currentHeading~0); 1010586#L862-9 assume !(0 == ~currentFloorID~0); 1010084#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1006063#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1006062#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1006060#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1006061#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1011875#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1011874#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1006029#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1006024#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1005985#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1005986#L1637-2 assume !false; 1005981#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1005982#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1005977#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1005978#L1645 assume 1 != cleanup_~tmp___0~6#1; 1005973#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1005974#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1005969#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1005970#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1011866#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1005962#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1005963#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1011903#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1011902#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1005904#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1005905#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1005900#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1005901#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1005896#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1005895#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1005894#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1005893#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1005891#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1005886#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1005884#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1005183#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1004436#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1004437#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1003528#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1003507#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1004080#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1003401#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1003403#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1011724#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1003907#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1003908#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1004747#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1004638#L852-5 assume !(1 == ~currentHeading~0); 1004640#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1011750#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1004615#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1004616#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1016521#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1016518#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1016515#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1016511#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1016506#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1016507#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1018114#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1018113#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1005299#L1637-2 [2024-11-20 22:44:23,656 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:23,656 INFO L85 PathProgramCache]: Analyzing trace with hash 301983347, now seen corresponding path program 1 times [2024-11-20 22:44:23,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:23,656 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1596995351] [2024-11-20 22:44:23,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:23,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:23,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:23,763 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:23,763 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:23,763 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1596995351] [2024-11-20 22:44:23,763 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1596995351] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:23,763 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:23,764 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-20 22:44:23,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [433058693] [2024-11-20 22:44:23,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:23,764 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:23,764 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:23,765 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 9 times [2024-11-20 22:44:23,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:23,765 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2059005549] [2024-11-20 22:44:23,765 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:23,765 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:23,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:23,838 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:23,838 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:23,838 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2059005549] [2024-11-20 22:44:23,838 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2059005549] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:23,838 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:23,838 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:23,839 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1513591593] [2024-11-20 22:44:23,839 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:23,839 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:23,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:23,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-20 22:44:23,840 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-20 22:44:23,840 INFO L87 Difference]: Start difference. First operand 26433 states and 48880 transitions. cyclomatic complexity: 22448 Second operand has 6 states, 6 states have (on average 14.0) internal successors, (84), 6 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:24,016 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:24,016 INFO L93 Difference]: Finished difference Result 26433 states and 48878 transitions. [2024-11-20 22:44:24,016 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26433 states and 48878 transitions. [2024-11-20 22:44:24,109 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:24,175 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26433 states to 26433 states and 48878 transitions. [2024-11-20 22:44:24,175 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26433 [2024-11-20 22:44:24,194 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26433 [2024-11-20 22:44:24,194 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26433 states and 48878 transitions. [2024-11-20 22:44:24,210 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:24,210 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48878 transitions. [2024-11-20 22:44:24,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26433 states and 48878 transitions. [2024-11-20 22:44:24,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26433 to 26433. [2024-11-20 22:44:24,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26433 states, 26433 states have (on average 1.8491279839594446) internal successors, (48878), 26432 states have internal predecessors, (48878), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:24,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26433 states to 26433 states and 48878 transitions. [2024-11-20 22:44:24,445 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48878 transitions. [2024-11-20 22:44:24,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-20 22:44:24,446 INFO L425 stractBuchiCegarLoop]: Abstraction has 26433 states and 48878 transitions. [2024-11-20 22:44:24,446 INFO L332 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2024-11-20 22:44:24,446 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26433 states and 48878 transitions. [2024-11-20 22:44:24,780 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:24,781 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:24,781 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:24,784 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:24,784 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:24,784 INFO L745 eck$LassoCheckResult]: Stem: 1056342#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1056343#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1057359#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1056925#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1056926#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1056750#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1056751#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1057938#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1057166#L3030 assume !(0 == getOrigin_~person#1); 1057167#L3034 assume !(1 == getOrigin_~person#1); 1057323#L3038 assume !(2 == getOrigin_~person#1); 1056812#L3042 assume !(3 == getOrigin_~person#1); 1056813#L3046 assume !(4 == getOrigin_~person#1); 1057730#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1056368#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1056369#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1057588#L2235 assume 1 == initPersonOnFloor_~floor#1; 1057377#L2236 assume !(0 == initPersonOnFloor_~person#1); 1057378#L2239 assume !(1 == initPersonOnFloor_~person#1); 1057472#L2242 assume !(2 == initPersonOnFloor_~person#1); 1057473#L2245 assume !(3 == initPersonOnFloor_~person#1); 1058148#L2248 assume !(4 == initPersonOnFloor_~person#1); 1058170#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1056632#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1056633#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1057542#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1057692#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1058043#L2000 assume !(0 == callOnFloor_~floorID#1); 1058045#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1056678#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1056679#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1056743#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1056744#L3030-1 assume !(0 == getOrigin_~person#1); 1058193#L3034-1 assume !(1 == getOrigin_~person#1); 1058194#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1056692#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1056574#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1056575#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1058127#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1058128#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1057994#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1057995#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1058323#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1058322#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1058321#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1058319#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1056579#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1056580#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1058317#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1058313#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1058312#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1058311#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1058310#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1058309#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1058308#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1058293#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1057490#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1057306#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1057308#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1058305#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1057973#L1125 assume !(1 == ~doorState~0); 1056163#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1056164#L476 assume !(1 == stopRequestedInDirection_~dir#1); 1057913#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1057401#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1056255#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1056256#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1058294#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1058307#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1056251#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1056252#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1057741#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1056402#L852-2 assume !(1 == ~currentHeading~0); 1056403#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1056495#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1057263#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1057435#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1057547#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1057548#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1057790#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1057921#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1056594#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1056595#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064689#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1058198#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1058199#L1637-2 [2024-11-20 22:44:24,784 INFO L747 eck$LassoCheckResult]: Loop: 1058199#L1637-2 assume !false; 1064889#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1064888#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1064887#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1064886#L1645 assume 1 != cleanup_~tmp___0~6#1; 1064885#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1064884#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1064883#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1064881#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1064879#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1064880#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1064952#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1064949#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1064948#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1064932#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1064931#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1064930#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1064928#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1064929#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1068106#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1068098#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1068099#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1068103#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1068101#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1068100#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1068097#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1068094#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1063460#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1063459#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1063457#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1063458#L645-2 assume !(0 == ~currentFloorID~0); 1063485#L651-2 assume ~currentFloorID~0 > 0; 1063484#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1056601#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1056602#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1058216#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1060659#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1060651#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1060644#L852-3 assume !(1 == ~currentHeading~0); 1060637#L862-9 assume !(0 == ~currentFloorID~0); 1060627#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1060622#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1060623#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1064783#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1060616#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1060611#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1060605#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1060606#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1058878#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1058879#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1058843#L1637-2 assume !false; 1058844#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1058839#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1058840#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1058835#L1645 assume 1 != cleanup_~tmp___0~6#1; 1058836#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1058831#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1058832#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1058826#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1058828#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1064774#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1064973#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1058799#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1058800#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1058779#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1058780#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1058774#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1058775#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1058770#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1058769#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1058768#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1058767#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1058765#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1058764#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1058762#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1058075#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1057304#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1057305#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1056405#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1056187#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1056952#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1056281#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1056283#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1064499#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1056782#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1056783#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1064511#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1064505#L852-5 assume !(1 == ~currentHeading~0); 1064501#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1056995#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1057488#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1057489#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1064909#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1064908#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064907#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064899#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064895#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064892#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064891#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1064890#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1058199#L1637-2 [2024-11-20 22:44:24,785 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:24,785 INFO L85 PathProgramCache]: Analyzing trace with hash 1269394631, now seen corresponding path program 1 times [2024-11-20 22:44:24,785 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:24,785 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629323897] [2024-11-20 22:44:24,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:24,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:24,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:24,880 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:24,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:24,880 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629323897] [2024-11-20 22:44:24,881 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [629323897] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:24,881 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:24,881 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-20 22:44:24,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [984868828] [2024-11-20 22:44:24,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:24,881 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:24,882 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:24,882 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 4 times [2024-11-20 22:44:24,882 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:24,882 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1637936251] [2024-11-20 22:44:24,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:24,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:24,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:24,960 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:24,960 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:24,960 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1637936251] [2024-11-20 22:44:24,960 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1637936251] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:24,960 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:24,960 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:24,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2036549983] [2024-11-20 22:44:24,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:24,961 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:24,961 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:24,961 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-20 22:44:24,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-20 22:44:24,961 INFO L87 Difference]: Start difference. First operand 26433 states and 48878 transitions. cyclomatic complexity: 22446 Second operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:25,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:25,110 INFO L93 Difference]: Finished difference Result 26433 states and 48876 transitions. [2024-11-20 22:44:25,110 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26433 states and 48876 transitions. [2024-11-20 22:44:25,204 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:25,270 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26433 states to 26433 states and 48876 transitions. [2024-11-20 22:44:25,270 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26433 [2024-11-20 22:44:25,291 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26433 [2024-11-20 22:44:25,291 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26433 states and 48876 transitions. [2024-11-20 22:44:25,309 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:25,309 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48876 transitions. [2024-11-20 22:44:25,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26433 states and 48876 transitions. [2024-11-20 22:44:25,483 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26433 to 26433. [2024-11-20 22:44:25,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26433 states, 26433 states have (on average 1.8490523209624332) internal successors, (48876), 26432 states have internal predecessors, (48876), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:25,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26433 states to 26433 states and 48876 transitions. [2024-11-20 22:44:25,545 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48876 transitions. [2024-11-20 22:44:25,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-20 22:44:25,546 INFO L425 stractBuchiCegarLoop]: Abstraction has 26433 states and 48876 transitions. [2024-11-20 22:44:25,546 INFO L332 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2024-11-20 22:44:25,546 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26433 states and 48876 transitions. [2024-11-20 22:44:25,614 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-20 22:44:25,614 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:25,614 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:25,617 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:25,617 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:25,618 INFO L745 eck$LassoCheckResult]: Stem: 1109224#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1109225#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1110256#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1109815#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1109816#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1109632#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1109633#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1110850#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1110059#L3030 assume !(0 == getOrigin_~person#1); 1110060#L3034 assume !(1 == getOrigin_~person#1); 1110221#L3038 assume !(2 == getOrigin_~person#1); 1109697#L3042 assume !(3 == getOrigin_~person#1); 1109698#L3046 assume !(4 == getOrigin_~person#1); 1110640#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1109250#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1109251#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1110489#L2235 assume 1 == initPersonOnFloor_~floor#1; 1110277#L2236 assume !(0 == initPersonOnFloor_~person#1); 1110278#L2239 assume !(1 == initPersonOnFloor_~person#1); 1110369#L2242 assume !(2 == initPersonOnFloor_~person#1); 1110370#L2245 assume !(3 == initPersonOnFloor_~person#1); 1111049#L2248 assume !(4 == initPersonOnFloor_~person#1); 1111078#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1109517#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1109518#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1110442#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1110601#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1110956#L2000 assume !(0 == callOnFloor_~floorID#1); 1110957#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1109796#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1110355#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1110356#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1109269#L3030-1 assume !(0 == getOrigin_~person#1); 1109270#L3034-1 assume !(1 == getOrigin_~person#1); 1108956#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1108957#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1109458#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1109459#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1111033#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1111034#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1110905#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1110906#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1111236#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1109127#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1109128#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1109184#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1109463#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1109464#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1110773#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1110774#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1111230#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1111229#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1111228#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1111227#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1111226#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1111225#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1111205#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1110387#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1110204#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1110206#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1111222#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1110884#L1125 assume !(1 == ~doorState~0); 1109044#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1109045#L476 assume !(1 == stopRequestedInDirection_~dir#1); 1110826#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1110302#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1109136#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1109137#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1111206#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1111224#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1109129#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1109130#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1110651#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1109285#L852-2 assume !(1 == ~currentHeading~0); 1109286#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1109379#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1110160#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1110334#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1110447#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1110448#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1110703#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1110832#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1111007#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1117560#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1117558#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1111108#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1111109#L1637-2 [2024-11-20 22:44:25,618 INFO L747 eck$LassoCheckResult]: Loop: 1111109#L1637-2 assume !false; 1123769#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1122335#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1122336#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1122253#L1645 assume 1 != cleanup_~tmp___0~6#1; 1122254#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1117770#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1117771#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1117761#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1117763#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1123891#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1123889#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1123886#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1117730#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1117720#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1117715#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1117716#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1117688#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1117689#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1123866#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1128241#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1128242#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1128245#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1128243#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1128240#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1128238#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1128237#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1111730#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1111832#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1111833#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1111826#L645-2 assume !(0 == ~currentFloorID~0); 1111827#L651-2 assume ~currentFloorID~0 > 0; 1110588#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1110589#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1113875#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1113861#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1113842#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1113832#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1113830#L852-3 assume !(1 == ~currentHeading~0); 1113823#L862-9 assume !(0 == ~currentFloorID~0); 1113813#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1113807#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1113808#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1117640#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1117637#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1117638#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1117639#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1112013#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1112008#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1111932#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1111933#L1637-2 assume !false; 1111924#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1111925#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1111916#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1111917#L1645 assume 1 != cleanup_~tmp___0~6#1; 1111908#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1111909#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1111867#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1111868#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1117620#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1111839#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1111840#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1117698#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1117697#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1111767#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1111768#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1111759#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1111760#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1111756#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1111755#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1111754#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1111753#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1111751#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1111750#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1111731#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1110987#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1110988#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1111641#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1109288#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1109272#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1111856#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1111855#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1111853#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1111850#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1111851#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1110518#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1110519#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1110406#L852-5 assume !(1 == ~currentHeading~0); 1110408#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1109885#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1110384#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1110385#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1123804#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1123805#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1123799#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1123801#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1123793#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1123794#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1123772#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1123773#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1111109#L1637-2 [2024-11-20 22:44:25,619 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:25,619 INFO L85 PathProgramCache]: Analyzing trace with hash 2124053735, now seen corresponding path program 1 times [2024-11-20 22:44:25,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:25,619 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [517913056] [2024-11-20 22:44:25,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:25,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:25,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:25,658 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:25,658 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:25,658 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [517913056] [2024-11-20 22:44:25,659 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [517913056] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:25,659 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:25,659 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-20 22:44:25,659 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1422880357] [2024-11-20 22:44:25,659 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:25,659 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:25,659 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:25,659 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 10 times [2024-11-20 22:44:25,659 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:25,660 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [160677447] [2024-11-20 22:44:25,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:25,660 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:25,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:25,731 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:25,731 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:25,731 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [160677447] [2024-11-20 22:44:25,731 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [160677447] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:25,731 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:25,731 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:25,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912112132] [2024-11-20 22:44:25,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:25,732 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:25,732 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:25,732 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:44:25,732 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:44:25,733 INFO L87 Difference]: Start difference. First operand 26433 states and 48876 transitions. cyclomatic complexity: 22444 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 2 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:25,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:25,991 INFO L93 Difference]: Finished difference Result 26669 states and 49234 transitions. [2024-11-20 22:44:25,991 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26669 states and 49234 transitions. [2024-11-20 22:44:26,080 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23804 [2024-11-20 22:44:26,144 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26669 states to 26669 states and 49234 transitions. [2024-11-20 22:44:26,144 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26669 [2024-11-20 22:44:26,164 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26669 [2024-11-20 22:44:26,164 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26669 states and 49234 transitions. [2024-11-20 22:44:26,181 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:26,181 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26669 states and 49234 transitions. [2024-11-20 22:44:26,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26669 states and 49234 transitions. [2024-11-20 22:44:26,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26669 to 26624. [2024-11-20 22:44:26,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26624 states, 26624 states have (on average 1.8475060096153846) internal successors, (49188), 26623 states have internal predecessors, (49188), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:26,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26624 states to 26624 states and 49188 transitions. [2024-11-20 22:44:26,410 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26624 states and 49188 transitions. [2024-11-20 22:44:26,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:44:26,411 INFO L425 stractBuchiCegarLoop]: Abstraction has 26624 states and 49188 transitions. [2024-11-20 22:44:26,411 INFO L332 stractBuchiCegarLoop]: ======== Iteration 30 ============ [2024-11-20 22:44:26,411 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26624 states and 49188 transitions. [2024-11-20 22:44:26,481 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23759 [2024-11-20 22:44:26,481 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:26,481 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:26,484 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:26,484 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:26,484 INFO L745 eck$LassoCheckResult]: Stem: 1162337#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1162338#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1163344#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1162917#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1162918#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1162740#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1162741#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1163924#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1163152#L3030 assume !(0 == getOrigin_~person#1); 1163153#L3034 assume !(1 == getOrigin_~person#1); 1163309#L3038 assume !(2 == getOrigin_~person#1); 1162804#L3042 assume !(3 == getOrigin_~person#1); 1162805#L3046 assume !(4 == getOrigin_~person#1); 1163721#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1162363#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1162364#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1163577#L2235 assume 1 == initPersonOnFloor_~floor#1; 1163365#L2236 assume !(0 == initPersonOnFloor_~person#1); 1163366#L2239 assume !(1 == initPersonOnFloor_~person#1); 1163458#L2242 assume !(2 == initPersonOnFloor_~person#1); 1163459#L2245 assume !(3 == initPersonOnFloor_~person#1); 1164118#L2248 assume !(4 == initPersonOnFloor_~person#1); 1164136#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1162626#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1162627#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1163527#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1163684#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1164027#L2000 assume !(0 == callOnFloor_~floorID#1); 1164028#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1162899#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1163444#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1163445#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1162379#L3030-1 assume !(0 == getOrigin_~person#1); 1162380#L3034-1 assume !(1 == getOrigin_~person#1); 1162068#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1162069#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1162568#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1162569#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1164100#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1164101#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1163979#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1163980#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1164273#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1162240#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1162241#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1162297#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1162573#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1162574#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1163850#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1163851#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1164267#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1164266#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1164265#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1164264#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1164263#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1164262#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1164247#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1163476#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1163292#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1163294#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1164259#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1163957#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1162157#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1162158#L476 assume !(1 == stopRequestedInDirection_~dir#1); 1163899#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1163392#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1162249#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1162250#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1164248#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1164261#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1162242#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1162243#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1163732#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1162397#L852-2 assume !(1 == ~currentHeading~0); 1162398#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1162491#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1163248#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1163425#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1165874#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1165873#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165872#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165859#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165864#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165862#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165856#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1165855#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1165840#L1637-2 [2024-11-20 22:44:26,485 INFO L747 eck$LassoCheckResult]: Loop: 1165840#L1637-2 assume !false; 1165563#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1165543#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1165536#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1165530#L1645 assume 1 != cleanup_~tmp___0~6#1; 1165524#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165517#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165506#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1164852#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1164854#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165636#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1165586#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165584#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1165578#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1165568#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1165533#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1165534#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165522#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1165513#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165514#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1181879#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1181878#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1181875#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1181873#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1181871#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1181870#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1181869#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1165289#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1165287#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1165286#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1165285#L645-2 assume !(0 == ~currentFloorID~0); 1165284#L651-2 assume ~currentFloorID~0 > 0; 1165281#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165282#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165283#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1165280#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1162340#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1163627#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1162999#L852-3 assume !(1 == ~currentHeading~0); 1162505#L862-9 assume !(0 == ~currentFloorID~0); 1162506#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1164169#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1165901#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1165900#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1165899#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1165898#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1165897#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1165889#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1165890#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1166275#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1166274#L1637-2 assume !false; 1166273#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1166272#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1166271#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1166270#L1645 assume 1 != cleanup_~tmp___0~6#1; 1166269#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1166268#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1166267#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1166266#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1166265#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1166264#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1166262#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165580#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1165581#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1165541#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1165542#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1165527#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165528#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1166219#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1166220#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1166215#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1166216#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1166093#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1166095#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1166087#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1166089#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1163290#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1163291#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1163996#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1165562#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1166013#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1165920#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1166009#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1165998#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1165953#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1165923#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1162838#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1162839#L852-5 assume !(1 == ~currentHeading~0); 1162435#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1162436#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1163473#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1163474#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1166044#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1166042#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1166043#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165893#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165886#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165883#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165881#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1165854#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1165840#L1637-2 [2024-11-20 22:44:26,486 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:26,486 INFO L85 PathProgramCache]: Analyzing trace with hash 1983505125, now seen corresponding path program 1 times [2024-11-20 22:44:26,486 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:26,486 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [444142507] [2024-11-20 22:44:26,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:26,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:26,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:26,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:26,547 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:26,547 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [444142507] [2024-11-20 22:44:26,547 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [444142507] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:26,547 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:26,547 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:26,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1644719227] [2024-11-20 22:44:26,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:26,548 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:26,548 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:26,548 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 5 times [2024-11-20 22:44:26,549 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:26,549 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1495632786] [2024-11-20 22:44:26,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:26,549 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:26,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:26,620 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:26,620 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:26,620 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1495632786] [2024-11-20 22:44:26,621 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1495632786] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:26,621 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:26,621 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:26,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1649326926] [2024-11-20 22:44:26,621 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:26,621 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:26,621 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:26,622 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:44:26,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:44:26,622 INFO L87 Difference]: Start difference. First operand 26624 states and 49188 transitions. cyclomatic complexity: 22565 Second operand has 4 states, 4 states have (on average 21.5) internal successors, (86), 3 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:26,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:26,853 INFO L93 Difference]: Finished difference Result 50060 states and 92512 transitions. [2024-11-20 22:44:26,853 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50060 states and 92512 transitions. [2024-11-20 22:44:27,293 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 47171 [2024-11-20 22:44:27,440 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50060 states to 50060 states and 92512 transitions. [2024-11-20 22:44:27,440 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50060 [2024-11-20 22:44:27,479 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50060 [2024-11-20 22:44:27,480 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50060 states and 92512 transitions. [2024-11-20 22:44:27,515 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:27,515 INFO L218 hiAutomatonCegarLoop]: Abstraction has 50060 states and 92512 transitions. [2024-11-20 22:44:27,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50060 states and 92512 transitions. [2024-11-20 22:44:27,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50060 to 50050. [2024-11-20 22:44:27,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50050 states, 50050 states have (on average 1.848091908091908) internal successors, (92497), 50049 states have internal predecessors, (92497), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:28,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50050 states to 50050 states and 92497 transitions. [2024-11-20 22:44:28,098 INFO L240 hiAutomatonCegarLoop]: Abstraction has 50050 states and 92497 transitions. [2024-11-20 22:44:28,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:44:28,099 INFO L425 stractBuchiCegarLoop]: Abstraction has 50050 states and 92497 transitions. [2024-11-20 22:44:28,099 INFO L332 stractBuchiCegarLoop]: ======== Iteration 31 ============ [2024-11-20 22:44:28,099 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50050 states and 92497 transitions. [2024-11-20 22:44:28,271 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 47161 [2024-11-20 22:44:28,271 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:28,271 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:28,278 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:28,278 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:28,279 INFO L745 eck$LassoCheckResult]: Stem: 1239034#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1239035#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1240055#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1239623#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1239624#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1239448#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1239449#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1240636#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1239865#L3030 assume !(0 == getOrigin_~person#1); 1239866#L3034 assume !(1 == getOrigin_~person#1); 1240019#L3038 assume !(2 == getOrigin_~person#1); 1239512#L3042 assume !(3 == getOrigin_~person#1); 1239513#L3046 assume !(4 == getOrigin_~person#1); 1240432#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1239059#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1239060#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1240290#L2235 assume 1 == initPersonOnFloor_~floor#1; 1240076#L2236 assume !(0 == initPersonOnFloor_~person#1); 1240077#L2239 assume !(1 == initPersonOnFloor_~person#1); 1240172#L2242 assume !(2 == initPersonOnFloor_~person#1); 1240173#L2245 assume !(3 == initPersonOnFloor_~person#1); 1240834#L2248 assume !(4 == initPersonOnFloor_~person#1); 1240854#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1239331#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1239332#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1240242#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1240390#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1240739#L2000 assume !(0 == callOnFloor_~floorID#1); 1240741#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1239374#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1239375#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1239441#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1239442#L3030-1 assume !(0 == getOrigin_~person#1); 1240872#L3034-1 assume !(1 == getOrigin_~person#1); 1240873#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1239383#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1239384#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1239365#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1239366#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1240570#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1240571#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1239077#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1239078#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1240965#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1240986#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1240141#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1240142#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1240983#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1240982#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1240979#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1240978#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1240977#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1240976#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1240975#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1240974#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1240973#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1240959#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1240191#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1240004#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1240005#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1240971#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1240672#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1238854#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1238855#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1240465#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1240466#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1240102#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1238946#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1238947#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1240964#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1240972#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1238939#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1238940#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1240443#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1239094#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1239095#isTopFloor_returnLabel#5 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1239187#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1239188#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1240827#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1240136#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1240248#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1240249#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243095#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243021#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243026#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243024#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243016#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1242992#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1242870#L1637-2 [2024-11-20 22:44:28,280 INFO L747 eck$LassoCheckResult]: Loop: 1242870#L1637-2 assume !false; 1242855#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1242849#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1242845#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1242772#L1645 assume 1 != cleanup_~tmp___0~6#1; 1242696#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1242641#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1242636#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1241687#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1241067#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1241068#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1250302#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1250293#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1250166#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1245360#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1243733#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1243721#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1243719#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1243717#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1241041#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1241024#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1241025#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1241019#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1241015#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1241013#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1241012#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1241008#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1241007#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1241005#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1241003#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1241002#L645-2 assume !(0 == ~currentFloorID~0); 1241001#L651-2 assume ~currentFloorID~0 > 0; 1240998#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1240999#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1241000#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1240996#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1240997#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1243227#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1243226#L852-3 assume !(1 == ~currentHeading~0); 1243126#L862-9 assume !(0 == ~currentFloorID~0); 1243108#L862-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1243103#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1243100#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1243098#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1243094#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1243084#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1243032#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1242998#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1242988#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1242986#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1242985#L1637-2 assume !false; 1242984#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1242983#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1242982#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1242981#L1645 assume 1 != cleanup_~tmp___0~6#1; 1242980#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1242979#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1242978#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1242976#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1242974#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1242973#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1242971#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1242968#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1242919#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1242897#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1242895#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1242893#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1242890#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1242888#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1242886#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1242884#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1242882#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1242880#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1242877#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1242875#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1242867#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1242865#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1242862#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1242863#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1243678#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1243792#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1243661#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1243789#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1243780#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1243768#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1243752#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1243747#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1243748#L852-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1243072#isTopFloor_returnLabel#10 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1243070#L856-15 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1243067#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1243063#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1243061#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1243058#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1243057#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243055#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243050#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243046#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243043#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243015#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1242991#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1242870#L1637-2 [2024-11-20 22:44:28,281 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:28,281 INFO L85 PathProgramCache]: Analyzing trace with hash -2035962087, now seen corresponding path program 1 times [2024-11-20 22:44:28,281 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:28,281 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [227919821] [2024-11-20 22:44:28,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:28,282 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:28,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:28,424 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:28,424 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:28,424 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [227919821] [2024-11-20 22:44:28,424 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [227919821] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:28,424 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:28,424 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:44:28,425 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [562229572] [2024-11-20 22:44:28,425 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:28,425 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:28,425 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:28,425 INFO L85 PathProgramCache]: Analyzing trace with hash -303387767, now seen corresponding path program 1 times [2024-11-20 22:44:28,425 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:28,425 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2103096191] [2024-11-20 22:44:28,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:28,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:28,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:28,831 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:28,831 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:28,831 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2103096191] [2024-11-20 22:44:28,831 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2103096191] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:28,831 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:28,831 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:28,832 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1335633567] [2024-11-20 22:44:28,832 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:28,832 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:28,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:28,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:44:28,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:44:28,836 INFO L87 Difference]: Start difference. First operand 50050 states and 92497 transitions. cyclomatic complexity: 42448 Second operand has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:29,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:29,265 INFO L93 Difference]: Finished difference Result 53321 states and 98549 transitions. [2024-11-20 22:44:29,265 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53321 states and 98549 transitions. [2024-11-20 22:44:29,470 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50311 [2024-11-20 22:44:29,620 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53321 states to 53321 states and 98549 transitions. [2024-11-20 22:44:29,620 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53321 [2024-11-20 22:44:29,663 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53321 [2024-11-20 22:44:29,663 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53321 states and 98549 transitions. [2024-11-20 22:44:29,697 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:29,697 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53321 states and 98549 transitions. [2024-11-20 22:44:29,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53321 states and 98549 transitions. [2024-11-20 22:44:30,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53321 to 53195. [2024-11-20 22:44:30,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53195 states, 53195 states have (on average 1.8488203778550616) internal successors, (98348), 53194 states have internal predecessors, (98348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:30,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53195 states to 53195 states and 98348 transitions. [2024-11-20 22:44:30,727 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53195 states and 98348 transitions. [2024-11-20 22:44:30,727 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:44:30,728 INFO L425 stractBuchiCegarLoop]: Abstraction has 53195 states and 98348 transitions. [2024-11-20 22:44:30,728 INFO L332 stractBuchiCegarLoop]: ======== Iteration 32 ============ [2024-11-20 22:44:30,728 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53195 states and 98348 transitions. [2024-11-20 22:44:30,875 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50240 [2024-11-20 22:44:30,875 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:30,875 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:30,883 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:30,883 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:30,884 INFO L745 eck$LassoCheckResult]: Stem: 1342426#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1342427#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1343446#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1343007#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1343008#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1342828#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1342829#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1344021#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1343253#L3030 assume !(0 == getOrigin_~person#1); 1343254#L3034 assume !(1 == getOrigin_~person#1); 1343410#L3038 assume !(2 == getOrigin_~person#1); 1342891#L3042 assume !(3 == getOrigin_~person#1); 1342892#L3046 assume !(4 == getOrigin_~person#1); 1343816#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1342448#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1342449#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1343670#L2235 assume 1 == initPersonOnFloor_~floor#1; 1343464#L2236 assume !(0 == initPersonOnFloor_~person#1); 1343465#L2239 assume !(1 == initPersonOnFloor_~person#1); 1343552#L2242 assume !(2 == initPersonOnFloor_~person#1); 1343553#L2245 assume !(3 == initPersonOnFloor_~person#1); 1344206#L2248 assume !(4 == initPersonOnFloor_~person#1); 1344234#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1342715#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1342716#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1343621#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1343777#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1344120#L2000 assume !(0 == callOnFloor_~floorID#1); 1344121#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1342988#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1344389#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1344388#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1344387#L3030-1 assume !(0 == getOrigin_~person#1); 1344386#L3034-1 assume !(1 == getOrigin_~person#1); 1344385#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1344384#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1342657#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1342658#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1342749#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1343950#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1343951#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1342466#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1342467#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1342329#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1342330#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1342383#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1343526#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1344369#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1344368#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1344365#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1344364#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1344363#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1344362#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1344361#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1344360#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1344359#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1344345#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1343571#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1343396#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1343397#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1344357#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1344058#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1342242#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1342243#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1343849#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1343850#L480 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1343837#L486 assume !(~currentFloorID~0 < 0); 1342133#$Ultimate##2052 assume !(~currentFloorID~0 < 0); 1342134#$Ultimate##2058 assume ~currentFloorID~0 < 1; 1343689#L516 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 1343690#$Ultimate##2074 assume ~currentFloorID~0 < 1; 1342224#L532 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 1342225#L533 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1342210#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1344083#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1343263#L852 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1343143#isTopFloor_returnLabel#2 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1343144#L856 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1343249#L862-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1342343#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1344393#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1344394#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1343876#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1343877#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1346911#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1346916#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1346914#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1346908#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1346907#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1346903#L1637-2 [2024-11-20 22:44:30,884 INFO L747 eck$LassoCheckResult]: Loop: 1346903#L1637-2 assume !false; 1346904#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1346899#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1346900#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1346893#L1645 assume 1 != cleanup_~tmp___0~6#1; 1346894#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1346885#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1346886#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1346876#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1346878#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1346869#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1346870#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1350183#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1346855#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1346845#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1346840#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1346841#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1346834#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1346835#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 1355582#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1355580#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1355579#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1355578#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1355575#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1355573#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1355572#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1355571#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1346431#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1346429#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1346426#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1346425#L476-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1346420#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1346417#L480-2 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1346418#L486-2 assume ~currentFloorID~0 < 0; 1346451#L487-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1346452#L1932-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1346465#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~0#1 := stopRequestedInDirection_#t~ret11#1;havoc stopRequestedInDirection_#t~ret11#1; 1346399#L491-2 assume 0 != stopRequestedInDirection_~tmp___4~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1346397#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1346396#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1346109#L852-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1346102#isTopFloor_returnLabel#7 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1346093#L856-9 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1346086#L862-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1346083#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1346082#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1346081#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1346080#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1346079#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1346078#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1346073#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1346063#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1346064#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1346047#L1637-2 assume !false; 1346048#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1346042#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1346043#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1346034#L1645 assume 1 != cleanup_~tmp___0~6#1; 1346035#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1346027#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1346028#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1344957#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1344959#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1347665#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1347662#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1347615#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1347098#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1347086#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1347084#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1347082#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1347079#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1347077#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1347075#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1347073#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1347071#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1347068#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1347067#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1347065#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1347063#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1347060#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1347059#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1342484#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1342485#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1347421#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1347419#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1347417#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1347418#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1347382#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1347363#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1347358#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1347356#L852-5 assume !(1 == ~currentHeading~0); 1347355#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1346758#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1346731#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1347234#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1347235#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1347223#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1347224#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1347238#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1347233#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1347230#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1346925#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1346926#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1346903#L1637-2 [2024-11-20 22:44:30,885 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:30,885 INFO L85 PathProgramCache]: Analyzing trace with hash 1903061771, now seen corresponding path program 1 times [2024-11-20 22:44:30,885 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:30,885 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [518232894] [2024-11-20 22:44:30,885 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:30,885 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:30,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:30,979 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:30,979 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:30,979 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [518232894] [2024-11-20 22:44:30,980 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [518232894] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:30,980 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:30,980 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:30,980 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [56970383] [2024-11-20 22:44:30,980 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:30,980 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:30,981 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:30,981 INFO L85 PathProgramCache]: Analyzing trace with hash 140590437, now seen corresponding path program 1 times [2024-11-20 22:44:30,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:30,981 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [86103395] [2024-11-20 22:44:30,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:30,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:31,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:31,045 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-11-20 22:44:31,046 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:31,047 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [86103395] [2024-11-20 22:44:31,047 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [86103395] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:31,047 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:31,047 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:31,047 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1191056158] [2024-11-20 22:44:31,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:31,047 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:31,048 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:31,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:44:31,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:44:31,049 INFO L87 Difference]: Start difference. First operand 53195 states and 98348 transitions. cyclomatic complexity: 45155 Second operand has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:31,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:31,329 INFO L93 Difference]: Finished difference Result 53328 states and 98337 transitions. [2024-11-20 22:44:31,329 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53328 states and 98337 transitions. [2024-11-20 22:44:31,594 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50370 [2024-11-20 22:44:31,776 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53328 states to 53328 states and 98337 transitions. [2024-11-20 22:44:31,776 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53328 [2024-11-20 22:44:31,819 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53328 [2024-11-20 22:44:31,819 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53328 states and 98337 transitions. [2024-11-20 22:44:31,853 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:31,854 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53328 states and 98337 transitions. [2024-11-20 22:44:31,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53328 states and 98337 transitions. [2024-11-20 22:44:32,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53328 to 53195. [2024-11-20 22:44:32,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53195 states, 53195 states have (on average 1.8445342607387913) internal successors, (98120), 53194 states have internal predecessors, (98120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:32,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53195 states to 53195 states and 98120 transitions. [2024-11-20 22:44:32,914 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53195 states and 98120 transitions. [2024-11-20 22:44:32,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:44:32,915 INFO L425 stractBuchiCegarLoop]: Abstraction has 53195 states and 98120 transitions. [2024-11-20 22:44:32,915 INFO L332 stractBuchiCegarLoop]: ======== Iteration 33 ============ [2024-11-20 22:44:32,915 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53195 states and 98120 transitions. [2024-11-20 22:44:33,065 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50240 [2024-11-20 22:44:33,065 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:33,065 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:33,073 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:33,073 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:33,073 INFO L745 eck$LassoCheckResult]: Stem: 1448953#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1448954#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1449972#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1449540#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1449541#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1449360#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1449361#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1450546#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1449778#L3030 assume !(0 == getOrigin_~person#1); 1449779#L3034 assume !(1 == getOrigin_~person#1); 1449936#L3038 assume !(2 == getOrigin_~person#1); 1449425#L3042 assume !(3 == getOrigin_~person#1); 1449426#L3046 assume !(4 == getOrigin_~person#1); 1450338#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1448979#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1448980#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1450200#L2235 assume 1 == initPersonOnFloor_~floor#1; 1449990#L2236 assume !(0 == initPersonOnFloor_~person#1); 1449991#L2239 assume !(1 == initPersonOnFloor_~person#1); 1450082#L2242 assume !(2 == initPersonOnFloor_~person#1); 1450083#L2245 assume !(3 == initPersonOnFloor_~person#1); 1450740#L2248 assume !(4 == initPersonOnFloor_~person#1); 1450766#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1449245#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1449246#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1450153#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1450299#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1450649#L2000 assume !(0 == callOnFloor_~floorID#1); 1450650#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1449522#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1450069#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1450070#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1448995#L3030-1 assume !(0 == getOrigin_~person#1); 1448996#L3034-1 assume !(1 == getOrigin_~person#1); 1448690#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1448691#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1449187#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1449188#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1450723#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1450724#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1450923#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1450921#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1450920#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1450919#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1450918#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1450916#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1449192#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1449193#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1449837#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1450911#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1450910#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1450909#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1450908#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1450907#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1450906#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1450905#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1450888#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1450101#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1449918#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1449920#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1450902#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1450583#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1448774#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1448775#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1450374#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1450375#L480 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1450362#L486 assume !(~currentFloorID~0 < 0); 1448666#$Ultimate##2052 assume !(~currentFloorID~0 < 0); 1448667#$Ultimate##2058 assume ~currentFloorID~0 < 1; 1450218#L516 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1450046#L1932-2 assume !(0 == isFloorCalling_~floorID#1); 1450047#L1936-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1448969#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret12#1;havoc stopRequestedInDirection_#t~ret12#1; 1449637#L520 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1448743#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1450609#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1449788#L852 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1449673#isTopFloor_returnLabel#2 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1449674#L856 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1449775#L862-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1448873#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1450048#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1450158#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1450159#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453305#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453283#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453288#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453286#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453277#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1453239#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1453236#L1637-2 [2024-11-20 22:44:33,074 INFO L747 eck$LassoCheckResult]: Loop: 1453236#L1637-2 assume !false; 1453234#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1453232#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1453230#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1453229#L1645 assume 1 != cleanup_~tmp___0~6#1; 1453228#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1453227#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1453226#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1453224#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1453222#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1453209#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1453182#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1453177#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1453161#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1453146#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1453113#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1453112#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1453111#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1453109#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 1453033#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1452979#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1452976#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1452974#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1452929#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1452923#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1452920#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1452916#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1452912#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1452909#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1452905#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1452903#L476-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1452899#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1452894#L480-2 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1452886#L486-2 assume ~currentFloorID~0 < 0; 1452887#L487-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1452898#L1932-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1452893#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~0#1 := stopRequestedInDirection_#t~ret11#1;havoc stopRequestedInDirection_#t~ret11#1; 1452884#L491-2 assume 0 != stopRequestedInDirection_~tmp___4~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1452885#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1459484#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1450995#L852-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1464808#isTopFloor_returnLabel#7 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1464805#L856-9 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1464806#L862-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1464890#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1464889#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1464887#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1464884#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1464883#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1464881#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1464875#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1464868#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1464589#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1464588#L1637-2 assume !false; 1464583#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1464581#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1464552#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1464551#L1645 assume 1 != cleanup_~tmp___0~6#1; 1464499#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1451975#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1451917#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1451172#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1451174#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1464786#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1464779#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1464776#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1464775#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1464763#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1464762#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1464760#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1464761#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1465141#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1465139#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1465138#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1465136#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1465134#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1465101#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1465096#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1464503#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1449916#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1449917#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1450619#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1450249#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1449566#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1448891#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1448893#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1450722#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1465286#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1453877#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1453595#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1453596#L852-5 assume !(1 == ~currentHeading~0); 1449051#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1449052#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1455085#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1455083#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1455081#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1455079#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453274#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453254#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453247#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453244#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1453242#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1453238#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1453236#L1637-2 [2024-11-20 22:44:33,074 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:33,074 INFO L85 PathProgramCache]: Analyzing trace with hash 356558387, now seen corresponding path program 1 times [2024-11-20 22:44:33,074 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:33,075 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97553470] [2024-11-20 22:44:33,075 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:33,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:33,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:33,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:33,161 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:33,161 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [97553470] [2024-11-20 22:44:33,161 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [97553470] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:33,161 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:33,161 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:33,161 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1974117744] [2024-11-20 22:44:33,161 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:33,162 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:33,162 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:33,162 INFO L85 PathProgramCache]: Analyzing trace with hash 140590437, now seen corresponding path program 2 times [2024-11-20 22:44:33,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:33,162 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323445871] [2024-11-20 22:44:33,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:33,162 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:33,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:33,218 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-11-20 22:44:33,218 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:33,218 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [323445871] [2024-11-20 22:44:33,218 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [323445871] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:33,218 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:33,218 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:33,218 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1368366035] [2024-11-20 22:44:33,218 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:33,219 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:33,219 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:33,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:44:33,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:44:33,219 INFO L87 Difference]: Start difference. First operand 53195 states and 98120 transitions. cyclomatic complexity: 44927 Second operand has 5 states, 5 states have (on average 18.0) internal successors, (90), 5 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:33,433 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:33,433 INFO L93 Difference]: Finished difference Result 53205 states and 98107 transitions. [2024-11-20 22:44:33,433 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53205 states and 98107 transitions. [2024-11-20 22:44:34,205 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50250 [2024-11-20 22:44:34,386 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53205 states to 53205 states and 98107 transitions. [2024-11-20 22:44:34,386 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53205 [2024-11-20 22:44:34,435 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53205 [2024-11-20 22:44:34,435 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53205 states and 98107 transitions. [2024-11-20 22:44:34,472 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:34,472 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53205 states and 98107 transitions. [2024-11-20 22:44:34,507 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53205 states and 98107 transitions. [2024-11-20 22:44:34,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53205 to 53195. [2024-11-20 22:44:35,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53195 states, 53195 states have (on average 1.8440078954788983) internal successors, (98092), 53194 states have internal predecessors, (98092), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:35,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53195 states to 53195 states and 98092 transitions. [2024-11-20 22:44:35,134 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53195 states and 98092 transitions. [2024-11-20 22:44:35,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:44:35,135 INFO L425 stractBuchiCegarLoop]: Abstraction has 53195 states and 98092 transitions. [2024-11-20 22:44:35,135 INFO L332 stractBuchiCegarLoop]: ======== Iteration 34 ============ [2024-11-20 22:44:35,135 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53195 states and 98092 transitions. [2024-11-20 22:44:35,313 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50240 [2024-11-20 22:44:35,313 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:35,313 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:35,320 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:35,321 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:35,321 INFO L745 eck$LassoCheckResult]: Stem: 1555364#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1555365#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1556373#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1555951#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1555952#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1555774#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1555775#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1556936#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1556185#L3030 assume !(0 == getOrigin_~person#1); 1556186#L3034 assume !(1 == getOrigin_~person#1); 1556339#L3038 assume !(2 == getOrigin_~person#1); 1555839#L3042 assume !(3 == getOrigin_~person#1); 1555840#L3046 assume !(4 == getOrigin_~person#1); 1556735#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1555390#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1555391#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1556603#L2235 assume 1 == initPersonOnFloor_~floor#1; 1556393#L2236 assume !(0 == initPersonOnFloor_~person#1); 1556394#L2239 assume !(1 == initPersonOnFloor_~person#1); 1556485#L2242 assume !(2 == initPersonOnFloor_~person#1); 1556486#L2245 assume !(3 == initPersonOnFloor_~person#1); 1557127#L2248 assume !(4 == initPersonOnFloor_~person#1); 1557147#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1555659#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1555660#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1556555#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1556699#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1557033#L2000 assume !(0 == callOnFloor_~floorID#1); 1557035#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1555703#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1555704#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1555767#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1555768#L3030-1 assume !(0 == getOrigin_~person#1); 1557167#L3034-1 assume !(1 == getOrigin_~person#1); 1557168#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1555712#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1555713#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1555693#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1555694#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1556867#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1556868#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1555408#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1555409#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1557246#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1557276#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1556457#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1556458#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1557271#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1557270#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1557267#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1557266#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1557265#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1557264#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1557263#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1557262#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1557261#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1557244#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1556504#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1556327#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1556328#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1557259#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1556969#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1555185#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1555186#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1556769#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1556770#L480 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1556757#L486 assume !(~currentFloorID~0 < 0); 1555077#$Ultimate##2052 assume !(~currentFloorID~0 < 0); 1555078#$Ultimate##2058 assume ~currentFloorID~0 < 1; 1556622#L516 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1556449#L1932-2 assume !(0 == isFloorCalling_~floorID#1); 1556450#L1936-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1555380#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret12#1;havoc stopRequestedInDirection_#t~ret12#1; 1556045#L520 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1555154#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1556994#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1556197#L852 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1556083#isTopFloor_returnLabel#2 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1556084#L856 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1555283#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1555284#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1556451#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1556560#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1556561#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1556794#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1568435#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1568440#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1568438#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1566411#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1566391#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1566388#L1637-2 [2024-11-20 22:44:35,321 INFO L747 eck$LassoCheckResult]: Loop: 1566388#L1637-2 assume !false; 1566384#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1565873#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1562899#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1561116#L1645 assume 1 != cleanup_~tmp___0~6#1; 1561115#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1561114#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1560781#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1557951#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1557373#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1557374#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1566011#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1566006#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1566004#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1565992#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1565989#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1565988#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1563996#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1563997#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1557343#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1557344#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1604064#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1557323#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1557315#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1557312#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1557314#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1565120#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1557304#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1557303#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1557298#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1557299#L645-2 assume !(0 == ~currentFloorID~0); 1557294#L651-2 assume ~currentFloorID~0 > 0; 1557295#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1557291#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1557290#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1557289#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1555367#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1563977#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1556034#L852-3 assume !(1 == ~currentHeading~0); 1556035#L862-9 assume !(0 == ~currentFloorID~0); 1560354#L862-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1560318#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1560315#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1560314#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1560309#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1560310#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1560311#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1560301#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1560289#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1560285#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1560281#L1637-2 assume !false; 1560280#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1560279#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1560278#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1560277#L1645 assume 1 != cleanup_~tmp___0~6#1; 1560276#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1560275#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1560274#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1560254#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1560245#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1560242#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1560227#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1560210#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1560204#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1560191#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1560188#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1560184#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1560178#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1560174#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1560167#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1560162#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1560155#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1560153#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1560152#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1560150#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1560149#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1560147#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1560144#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1560145#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1561117#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1560780#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1560747#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1560745#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1559899#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1559788#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1559774#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1559773#L1142-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1555875#L907-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1560357#getReverseHeading_returnLabel#4 timeShift_#t~ret46#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1560355#L852-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1560356#isTopFloor_returnLabel#9 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1556719#L856-12 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1556720#L862-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1568362#L868-9 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1568354#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1568353#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1568352#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1568351#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1568342#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1568338#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1568335#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1568334#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1566390#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1566388#L1637-2 [2024-11-20 22:44:35,322 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:35,322 INFO L85 PathProgramCache]: Analyzing trace with hash 1057622965, now seen corresponding path program 1 times [2024-11-20 22:44:35,322 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:35,322 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [660266645] [2024-11-20 22:44:35,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:35,323 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:35,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:35,534 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:35,534 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:35,534 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [660266645] [2024-11-20 22:44:35,535 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [660266645] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:35,535 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:35,535 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:35,535 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [804710628] [2024-11-20 22:44:35,535 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:35,536 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:35,536 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:35,536 INFO L85 PathProgramCache]: Analyzing trace with hash -319043004, now seen corresponding path program 1 times [2024-11-20 22:44:35,536 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:35,536 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [396007034] [2024-11-20 22:44:35,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:35,536 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:35,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:35,660 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-20 22:44:35,660 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:35,660 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [396007034] [2024-11-20 22:44:35,660 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [396007034] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:35,660 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:35,661 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:35,661 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1911286269] [2024-11-20 22:44:35,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:35,661 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:35,661 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:35,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-20 22:44:35,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-11-20 22:44:35,662 INFO L87 Difference]: Start difference. First operand 53195 states and 98092 transitions. cyclomatic complexity: 44899 Second operand has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 7 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:36,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:36,755 INFO L93 Difference]: Finished difference Result 54067 states and 99440 transitions. [2024-11-20 22:44:36,755 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 54067 states and 99440 transitions. [2024-11-20 22:44:36,963 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51139 [2024-11-20 22:44:37,122 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 54067 states to 54067 states and 99440 transitions. [2024-11-20 22:44:37,123 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 54067 [2024-11-20 22:44:37,170 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 54067 [2024-11-20 22:44:37,170 INFO L73 IsDeterministic]: Start isDeterministic. Operand 54067 states and 99440 transitions. [2024-11-20 22:44:37,208 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:37,208 INFO L218 hiAutomatonCegarLoop]: Abstraction has 54067 states and 99440 transitions. [2024-11-20 22:44:37,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54067 states and 99440 transitions. [2024-11-20 22:44:37,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54067 to 54012. [2024-11-20 22:44:37,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54012 states, 54012 states have (on average 1.840054062060283) internal successors, (99385), 54011 states have internal predecessors, (99385), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:38,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54012 states to 54012 states and 99385 transitions. [2024-11-20 22:44:38,332 INFO L240 hiAutomatonCegarLoop]: Abstraction has 54012 states and 99385 transitions. [2024-11-20 22:44:38,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-20 22:44:38,337 INFO L425 stractBuchiCegarLoop]: Abstraction has 54012 states and 99385 transitions. [2024-11-20 22:44:38,337 INFO L332 stractBuchiCegarLoop]: ======== Iteration 35 ============ [2024-11-20 22:44:38,337 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 54012 states and 99385 transitions. [2024-11-20 22:44:38,503 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51084 [2024-11-20 22:44:38,503 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:38,503 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:38,510 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:38,510 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:38,510 INFO L745 eck$LassoCheckResult]: Stem: 1662644#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1662645#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1663662#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1663231#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1663232#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1663054#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1663055#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1664230#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1663467#L3030 assume !(0 == getOrigin_~person#1); 1663468#L3034 assume !(1 == getOrigin_~person#1); 1663629#L3038 assume !(2 == getOrigin_~person#1); 1663118#L3042 assume !(3 == getOrigin_~person#1); 1663119#L3046 assume !(4 == getOrigin_~person#1); 1664027#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1662670#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1662671#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1663890#L2235 assume 1 == initPersonOnFloor_~floor#1; 1663682#L2236 assume !(0 == initPersonOnFloor_~person#1); 1663683#L2239 assume !(1 == initPersonOnFloor_~person#1); 1663775#L2242 assume !(2 == initPersonOnFloor_~person#1); 1663776#L2245 assume !(3 == initPersonOnFloor_~person#1); 1664422#L2248 assume !(4 == initPersonOnFloor_~person#1); 1664450#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1662939#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1662940#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1663844#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1663993#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1664327#L2000 assume !(0 == callOnFloor_~floorID#1); 1664328#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1663212#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1663760#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1663761#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1662689#L3030-1 assume !(0 == getOrigin_~person#1); 1662690#L3034-1 assume !(1 == getOrigin_~person#1); 1662379#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1662380#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1662881#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1662882#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1664406#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1664407#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1664280#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1664281#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1664582#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1662546#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1662547#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1662603#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1662886#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1662887#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1664158#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1664159#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1664576#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1664575#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1664574#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1664573#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1664572#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1664571#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1664552#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1663793#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1663615#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1663617#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1664568#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1664263#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1662466#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1662467#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1664062#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1664063#L480 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1664050#L486 assume !(~currentFloorID~0 < 0); 1662358#$Ultimate##2052 assume !(~currentFloorID~0 < 0); 1662359#$Ultimate##2058 assume ~currentFloorID~0 < 1; 1663908#L516 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1663737#L1932-2 assume !(0 == isFloorCalling_~floorID#1); 1663738#L1936-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1662660#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret12#1;havoc stopRequestedInDirection_#t~ret12#1; 1663325#L520 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1662435#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1664288#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1663478#L852 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1663362#isTopFloor_returnLabel#2 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1663363#L856 assume !(0 != continueInDirection_~tmp~3#1); 1662562#L862-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1662563#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1663739#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1663849#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1663850#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1664089#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1670856#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1670861#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1670859#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1670853#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1670852#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1670850#L1637-2 [2024-11-20 22:44:38,510 INFO L747 eck$LassoCheckResult]: Loop: 1670850#L1637-2 assume !false; 1670849#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1670848#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1670847#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1670846#L1645 assume 1 != cleanup_~tmp___0~6#1; 1670841#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1670839#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1670838#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1670836#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1670835#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1670834#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1670832#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1670829#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1670828#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1670817#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1670816#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1670815#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1670814#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1670812#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1670813#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1676982#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1676983#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1676600#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1676599#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1676592#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1676594#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1676562#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1676561#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1676558#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1676556#L476-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1676554#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1676551#L480-2 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1676549#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1676548#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1676546#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1676544#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1676541#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1676542#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1677027#L480-3 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1676321#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1677021#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1677020#L852-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1677019#isTopFloor_returnLabel#10 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1677018#L856-15 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1667051#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1667048#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1666559#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1667047#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1667046#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1666542#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1666543#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1666524#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1666525#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1673526#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1673524#L1637-2 assume !false; 1673522#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1673520#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1673518#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1673516#L1645 assume 1 != cleanup_~tmp___0~6#1; 1673514#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1673512#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1673510#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1673507#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1673504#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1673505#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1671420#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1671416#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1671414#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1671402#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1671400#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1671398#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1671396#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1671394#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1671392#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1671390#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1671388#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1671386#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1671385#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1671382#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1671380#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1671378#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1671377#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1662707#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1662708#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1692390#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1692388#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1692357#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1692358#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1692215#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1692196#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1663152#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1663153#L852-5 assume !(1 == ~currentHeading~0); 1662742#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1662743#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1671319#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1671315#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1671314#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1671312#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671310#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671306#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671302#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671299#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671298#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1670851#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1670850#L1637-2 [2024-11-20 22:44:38,511 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:38,511 INFO L85 PathProgramCache]: Analyzing trace with hash 614723825, now seen corresponding path program 1 times [2024-11-20 22:44:38,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:38,511 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [248480573] [2024-11-20 22:44:38,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:38,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:38,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:38,665 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:38,665 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:38,665 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [248480573] [2024-11-20 22:44:38,665 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [248480573] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:38,665 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:38,665 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:38,666 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1930476622] [2024-11-20 22:44:38,666 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:38,666 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:38,666 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:38,666 INFO L85 PathProgramCache]: Analyzing trace with hash 1865589342, now seen corresponding path program 1 times [2024-11-20 22:44:38,666 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:38,667 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1754257326] [2024-11-20 22:44:38,667 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:38,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:38,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:38,760 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-11-20 22:44:38,761 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:38,761 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1754257326] [2024-11-20 22:44:38,761 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1754257326] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:38,761 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:38,761 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:38,761 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [676899308] [2024-11-20 22:44:38,761 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:38,762 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:38,762 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:38,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-20 22:44:38,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-20 22:44:38,763 INFO L87 Difference]: Start difference. First operand 54012 states and 99385 transitions. cyclomatic complexity: 45375 Second operand has 6 states, 6 states have (on average 15.0) internal successors, (90), 5 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:39,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:39,593 INFO L93 Difference]: Finished difference Result 100316 states and 184159 transitions. [2024-11-20 22:44:39,593 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 100316 states and 184159 transitions. [2024-11-20 22:44:40,553 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 97254 [2024-11-20 22:44:40,908 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 100316 states to 100244 states and 184079 transitions. [2024-11-20 22:44:40,908 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 100244 [2024-11-20 22:44:40,992 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 100244 [2024-11-20 22:44:40,993 INFO L73 IsDeterministic]: Start isDeterministic. Operand 100244 states and 184079 transitions. [2024-11-20 22:44:41,055 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:41,055 INFO L218 hiAutomatonCegarLoop]: Abstraction has 100244 states and 184079 transitions. [2024-11-20 22:44:41,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100244 states and 184079 transitions. [2024-11-20 22:44:41,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100244 to 87232. [2024-11-20 22:44:41,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87232 states, 87232 states have (on average 1.8372730190755686) internal successors, (160269), 87231 states have internal predecessors, (160269), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:42,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87232 states to 87232 states and 160269 transitions. [2024-11-20 22:44:42,522 INFO L240 hiAutomatonCegarLoop]: Abstraction has 87232 states and 160269 transitions. [2024-11-20 22:44:42,522 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-20 22:44:42,522 INFO L425 stractBuchiCegarLoop]: Abstraction has 87232 states and 160269 transitions. [2024-11-20 22:44:42,522 INFO L332 stractBuchiCegarLoop]: ======== Iteration 36 ============ [2024-11-20 22:44:42,523 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 87232 states and 160269 transitions. [2024-11-20 22:44:42,797 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 84248 [2024-11-20 22:44:42,797 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:42,797 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:42,808 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:42,808 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:42,808 INFO L745 eck$LassoCheckResult]: Stem: 1816992#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1816993#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1818013#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1817577#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1817578#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1817397#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1817398#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1818580#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1817817#L3030 assume !(0 == getOrigin_~person#1); 1817818#L3034 assume !(1 == getOrigin_~person#1); 1817979#L3038 assume !(2 == getOrigin_~person#1); 1817462#L3042 assume !(3 == getOrigin_~person#1); 1817463#L3046 assume !(4 == getOrigin_~person#1); 1818382#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1817017#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1817018#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1818241#L2235 assume 1 == initPersonOnFloor_~floor#1; 1818033#L2236 assume !(0 == initPersonOnFloor_~person#1); 1818034#L2239 assume !(1 == initPersonOnFloor_~person#1); 1818125#L2242 assume !(2 == initPersonOnFloor_~person#1); 1818126#L2245 assume !(3 == initPersonOnFloor_~person#1); 1818763#L2248 assume !(4 == initPersonOnFloor_~person#1); 1818785#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1817280#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1817281#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1818194#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1818344#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1818682#L2000 assume !(0 == callOnFloor_~floorID#1); 1818683#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1817559#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1818110#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1818111#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1817036#L3030-1 assume !(0 == getOrigin_~person#1); 1817037#L3034-1 assume !(1 == getOrigin_~person#1); 1816727#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1816728#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1817223#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1817224#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1818748#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1818749#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1818634#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1818635#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1818922#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1816895#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1816896#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1816952#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1817228#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1817229#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1818507#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1818508#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1818916#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1818915#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1818914#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1818913#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1818912#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1818911#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1818895#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1818144#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1817961#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1817963#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1818908#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1818615#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1816814#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1816815#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1818416#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1818417#L480 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1818403#L486 assume !(~currentFloorID~0 < 0); 1816706#$Ultimate##2052 assume !(~currentFloorID~0 < 0); 1816707#$Ultimate##2058 assume ~currentFloorID~0 < 1; 1818262#L516 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1818088#L1932-2 assume !(0 == isFloorCalling_~floorID#1); 1818089#L1936-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1817007#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret12#1;havoc stopRequestedInDirection_#t~ret12#1; 1817671#L520 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1816783#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1818643#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1817828#L852 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1817709#isTopFloor_returnLabel#2 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1817710#L856 assume !(0 != continueInDirection_~tmp~3#1); 1816911#L862-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1816912#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1818090#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1818199#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1818200#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1818440#$Ultimate##2539 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1818562#L3215 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1842838#areDoorsOpen_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1842835#L3219 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1818039#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1818040#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1818807#L1637-2 [2024-11-20 22:44:42,809 INFO L747 eck$LassoCheckResult]: Loop: 1818807#L1637-2 assume !false; 1852754#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1852753#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1852746#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1852745#L1645 assume 1 != cleanup_~tmp___0~6#1; 1852741#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1852739#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1852737#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1852734#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1852731#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1852732#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1861844#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1861829#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1861825#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1861814#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1861813#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1861812#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1861811#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1833526#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1861685#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1861686#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1861676#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1861677#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1861657#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1861658#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1901158#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1901147#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1823447#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1823445#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1823444#L476-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1823443#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1823440#L480-2 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1823438#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1823433#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1823432#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1823431#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1823425#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1823423#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1823416#L480-3 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1823414#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1823411#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1823412#L852-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1823467#isTopFloor_returnLabel#10 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1823463#L856-15 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1823456#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1823395#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1823391#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1823387#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1823350#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1823351#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1823352#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1823335#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1823275#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1823274#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1823273#L1637-2 assume !false; 1823272#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1823271#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1823270#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1823265#L1645 assume 1 != cleanup_~tmp___0~6#1; 1823264#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1823263#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1823250#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1823248#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1823246#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1823245#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1823243#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1823240#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1823219#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1823208#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1823207#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1823206#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1823203#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1823205#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1823177#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1823178#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1823021#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1823022#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1822995#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1822996#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1822887#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1822886#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1822879#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1817053#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1817054#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1824996#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1824994#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1824995#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1824833#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1824832#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1824814#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1818933#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1818930#L852-5 assume !(1 == ~currentHeading~0); 1817089#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1817090#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1818141#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1818142#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1858352#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1858345#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1858344#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1858343#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1858342#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1858186#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1852756#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1852755#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1818807#L1637-2 [2024-11-20 22:44:42,809 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:42,810 INFO L85 PathProgramCache]: Analyzing trace with hash 124596527, now seen corresponding path program 1 times [2024-11-20 22:44:42,810 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:42,810 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1537742175] [2024-11-20 22:44:42,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:42,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:42,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:42,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:42,910 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:42,911 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1537742175] [2024-11-20 22:44:42,911 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1537742175] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:42,911 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:42,911 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:44:42,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1615011455] [2024-11-20 22:44:42,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:42,912 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:42,912 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:42,912 INFO L85 PathProgramCache]: Analyzing trace with hash -532995746, now seen corresponding path program 1 times [2024-11-20 22:44:42,912 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:42,912 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [617002935] [2024-11-20 22:44:42,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:42,913 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:42,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:43,016 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-11-20 22:44:43,016 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:43,016 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [617002935] [2024-11-20 22:44:43,017 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [617002935] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:43,017 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:43,017 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:43,017 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [947916647] [2024-11-20 22:44:43,017 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:43,017 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:43,018 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:43,018 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:44:43,018 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:44:43,018 INFO L87 Difference]: Start difference. First operand 87232 states and 160269 transitions. cyclomatic complexity: 73039 Second operand has 5 states, 5 states have (on average 18.0) internal successors, (90), 5 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:43,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:43,426 INFO L93 Difference]: Finished difference Result 87400 states and 160388 transitions. [2024-11-20 22:44:43,426 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 87400 states and 160388 transitions.