./Ultimate.py --spec /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/properties/termination.prp --file /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version fca748b1 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8190dbbeca15ebdc96e247bb91a06680a00a60089c25180495df59d4a11849af --- Real Ultimate output --- This is Ultimate 0.2.5-wip.dd.update-z3-fca748b-m [2024-11-20 22:44:48,368 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-20 22:44:48,466 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-20 22:44:48,473 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-20 22:44:48,473 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-20 22:44:48,503 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-20 22:44:48,503 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-20 22:44:48,504 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-20 22:44:48,504 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-20 22:44:48,508 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-20 22:44:48,508 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-20 22:44:48,509 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-20 22:44:48,509 INFO L153 SettingsManager]: * Use SBE=true [2024-11-20 22:44:48,509 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-20 22:44:48,509 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-20 22:44:48,509 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-20 22:44:48,510 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-20 22:44:48,510 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-20 22:44:48,510 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-20 22:44:48,510 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-20 22:44:48,510 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-20 22:44:48,513 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-20 22:44:48,513 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-20 22:44:48,513 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-20 22:44:48,513 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-20 22:44:48,514 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-20 22:44:48,514 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-20 22:44:48,514 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-20 22:44:48,514 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-20 22:44:48,514 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-20 22:44:48,515 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-20 22:44:48,515 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-20 22:44:48,515 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-20 22:44:48,516 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-20 22:44:48,516 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-20 22:44:48,516 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-20 22:44:48,517 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-20 22:44:48,517 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-20 22:44:48,517 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-20 22:44:48,517 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8190dbbeca15ebdc96e247bb91a06680a00a60089c25180495df59d4a11849af [2024-11-20 22:44:48,780 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-20 22:44:48,805 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-20 22:44:48,809 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-20 22:44:48,811 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-20 22:44:48,811 INFO L274 PluginConnector]: CDTParser initialized [2024-11-20 22:44:48,812 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c [2024-11-20 22:44:50,266 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-20 22:44:50,561 INFO L384 CDTParser]: Found 1 translation units. [2024-11-20 22:44:50,562 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c [2024-11-20 22:44:50,593 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e4eecaab7/2bec2cb616594effa7ea0b6f7d10c154/FLAG15cfaa178 [2024-11-20 22:44:50,826 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e4eecaab7/2bec2cb616594effa7ea0b6f7d10c154 [2024-11-20 22:44:50,828 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-20 22:44:50,830 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-20 22:44:50,831 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-20 22:44:50,831 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-20 22:44:50,839 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-20 22:44:50,839 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:44:50" (1/1) ... [2024-11-20 22:44:50,840 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@bdb7e04 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:50, skipping insertion in model container [2024-11-20 22:44:50,840 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:44:50" (1/1) ... [2024-11-20 22:44:50,902 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-20 22:44:51,423 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-20 22:44:51,441 INFO L200 MainTranslator]: Completed pre-run [2024-11-20 22:44:51,450 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [48] [2024-11-20 22:44:51,452 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [57] [2024-11-20 22:44:51,452 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [178] [2024-11-20 22:44:51,453 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [192] [2024-11-20 22:44:51,453 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [375] [2024-11-20 22:44:51,454 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [741] [2024-11-20 22:44:51,454 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1101] [2024-11-20 22:44:51,454 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2529] [2024-11-20 22:44:51,454 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2620] [2024-11-20 22:44:51,454 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [2655] [2024-11-20 22:44:51,568 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-20 22:44:51,605 INFO L204 MainTranslator]: Completed translation [2024-11-20 22:44:51,606 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51 WrapperNode [2024-11-20 22:44:51,606 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-20 22:44:51,607 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-20 22:44:51,607 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-20 22:44:51,608 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-20 22:44:51,613 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:51,637 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:51,760 INFO L138 Inliner]: procedures = 88, calls = 329, calls flagged for inlining = 182, calls inlined = 233, statements flattened = 7563 [2024-11-20 22:44:51,761 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-20 22:44:51,762 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-20 22:44:51,762 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-20 22:44:51,762 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-20 22:44:51,773 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:51,773 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:51,799 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:51,863 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-20 22:44:51,864 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:51,864 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:51,917 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:51,963 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:51,991 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:52,013 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:52,049 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-20 22:44:52,051 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-20 22:44:52,051 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-20 22:44:52,052 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-20 22:44:52,052 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (1/1) ... [2024-11-20 22:44:52,058 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-20 22:44:52,070 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-20 22:44:52,087 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-20 22:44:52,090 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-20 22:44:52,138 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-20 22:44:52,139 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-20 22:44:52,139 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-20 22:44:52,139 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-20 22:44:52,139 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-20 22:44:52,139 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-20 22:44:52,140 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-20 22:44:52,140 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-20 22:44:52,141 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-20 22:44:52,141 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-20 22:44:52,141 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-20 22:44:52,141 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-20 22:44:52,142 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-20 22:44:52,142 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-20 22:44:52,142 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-20 22:44:52,142 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-20 22:44:52,142 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-20 22:44:52,142 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-20 22:44:52,143 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-20 22:44:52,143 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-20 22:44:52,143 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-20 22:44:52,144 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-20 22:44:52,144 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-20 22:44:52,346 INFO L238 CfgBuilder]: Building ICFG [2024-11-20 22:44:52,348 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-20 22:44:56,439 INFO L? ?]: Removed 3503 outVars from TransFormulas that were not future-live. [2024-11-20 22:44:56,440 INFO L287 CfgBuilder]: Performing block encoding [2024-11-20 22:44:56,495 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-20 22:44:56,495 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-20 22:44:56,496 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:44:56 BoogieIcfgContainer [2024-11-20 22:44:56,496 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-20 22:44:56,497 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-20 22:44:56,497 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-20 22:44:56,501 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-20 22:44:56,501 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-20 22:44:56,501 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 20.11 10:44:50" (1/3) ... [2024-11-20 22:44:56,502 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1b481154 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 20.11 10:44:56, skipping insertion in model container [2024-11-20 22:44:56,502 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-20 22:44:56,502 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:44:51" (2/3) ... [2024-11-20 22:44:56,503 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1b481154 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 20.11 10:44:56, skipping insertion in model container [2024-11-20 22:44:56,503 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-20 22:44:56,503 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:44:56" (3/3) ... [2024-11-20 22:44:56,505 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product01.cil.c [2024-11-20 22:44:56,603 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-20 22:44:56,603 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-20 22:44:56,603 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-20 22:44:56,603 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-20 22:44:56,603 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-20 22:44:56,603 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-20 22:44:56,604 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-20 22:44:56,604 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-20 22:44:56,620 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2284 states, 2283 states have (on average 1.8751642575558476) internal successors, (4281), 2283 states have internal predecessors, (4281), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:56,748 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1123 [2024-11-20 22:44:56,748 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:56,748 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:56,766 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:56,767 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:56,767 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-20 22:44:56,772 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2284 states, 2283 states have (on average 1.8751642575558476) internal successors, (4281), 2283 states have internal predecessors, (4281), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:56,801 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1123 [2024-11-20 22:44:56,801 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:56,801 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:56,808 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:56,809 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:56,816 INFO L745 eck$LassoCheckResult]: Stem: 170#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2180#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 865#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 507#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 667#valid_product_returnLabel#1true main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 508#L1088true assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1480#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 104#__utac_acc__Specification2_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2030#L104true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 180#getOrigin_returnLabel#1true bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 994#L3009true assume 0 == initPersonOnFloor_~floor#1; 1513#L3010true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1217#L3117-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1981#L2801true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 605#L2813-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 942#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 385#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 658#L2738true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 88#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2276#L1925true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 235#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 780#L2073true assume !(0 != timeShift_~tmp___9~2#1); 364#L2164true assume !(1 == ~doorState~0); 1369#L2164-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 19#L1516true assume !(1 == stopRequestedInDirection_~dir#1); 1770#L1685true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1593#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 971#L2172true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 72#L1892true assume !(1 == ~currentHeading~0); 1610#L1902true assume !(0 == ~currentFloorID~0); 97#L1902-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 973#L1908-1true havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1186#L2181-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1009#getCurrentFloorID_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 898#L254true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2029#L255true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 698#areDoorsOpen_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1050#L259true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1097#L314true havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1912#timeShift_returnLabel#1true havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1140#L890-2true [2024-11-20 22:44:56,821 INFO L747 eck$LassoCheckResult]: Loop: 1140#L890-2true assume !false; 789#L891true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1740#L894true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 856#isBlocked_returnLabel#1true cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 665#L898true assume 1 != cleanup_~tmp___0~1#1; 968#L898-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 2007#L2738-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 835#L1420true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 146#anyStopRequested_returnLabel#1true isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1054#isIdle_returnLabel#1true cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 2027#L910true assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 212#L2738-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1065#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1456#L1925-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1990#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1670#L2073-2true assume !(0 != timeShift_~tmp___9~2#1); 561#L2164-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1907#L2164-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1222#L1516-2true assume !(1 == stopRequestedInDirection_~dir#1); 684#L1685-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1098#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1790#L2172-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1949#L1892-3true assume !(1 == ~currentHeading~0); 1516#L1902-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 654#L1902-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 885#L1908-7true havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2009#L2181-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1298#getCurrentFloorID_returnLabel#2true __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 267#L254-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1597#L255-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1353#areDoorsOpen_returnLabel#6true __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1678#L259-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 461#L314-1true havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1951#timeShift_returnLabel#2true havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1140#L890-2true [2024-11-20 22:44:56,830 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:56,830 INFO L85 PathProgramCache]: Analyzing trace with hash 846433161, now seen corresponding path program 1 times [2024-11-20 22:44:56,839 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:56,840 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [338786029] [2024-11-20 22:44:56,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:56,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:57,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:57,257 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:57,257 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:57,257 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [338786029] [2024-11-20 22:44:57,258 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [338786029] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:57,258 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:57,258 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:57,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [120295684] [2024-11-20 22:44:57,260 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:57,266 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:57,268 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:57,268 INFO L85 PathProgramCache]: Analyzing trace with hash 1611523527, now seen corresponding path program 1 times [2024-11-20 22:44:57,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:57,269 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2029576988] [2024-11-20 22:44:57,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:57,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:57,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:57,376 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:57,376 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:57,376 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2029576988] [2024-11-20 22:44:57,377 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2029576988] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:57,377 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:57,377 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-20 22:44:57,378 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1301338547] [2024-11-20 22:44:57,378 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:57,379 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:57,380 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:57,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-20 22:44:57,416 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-20 22:44:57,421 INFO L87 Difference]: Start difference. First operand has 2284 states, 2283 states have (on average 1.8751642575558476) internal successors, (4281), 2283 states have internal predecessors, (4281), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:57,652 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:57,653 INFO L93 Difference]: Finished difference Result 2278 states and 4267 transitions. [2024-11-20 22:44:57,654 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 2278 states and 4267 transitions. [2024-11-20 22:44:57,677 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1125 [2024-11-20 22:44:57,703 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 2278 states to 2260 states and 4247 transitions. [2024-11-20 22:44:57,705 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 2260 [2024-11-20 22:44:57,709 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 2260 [2024-11-20 22:44:57,710 INFO L73 IsDeterministic]: Start isDeterministic. Operand 2260 states and 4247 transitions. [2024-11-20 22:44:57,723 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:57,724 INFO L218 hiAutomatonCegarLoop]: Abstraction has 2260 states and 4247 transitions. [2024-11-20 22:44:57,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2260 states and 4247 transitions. [2024-11-20 22:44:57,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2260 to 2260. [2024-11-20 22:44:57,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2260 states, 2260 states have (on average 1.879203539823009) internal successors, (4247), 2259 states have internal predecessors, (4247), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:57,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2260 states to 2260 states and 4247 transitions. [2024-11-20 22:44:57,835 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2260 states and 4247 transitions. [2024-11-20 22:44:57,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-20 22:44:57,841 INFO L425 stractBuchiCegarLoop]: Abstraction has 2260 states and 4247 transitions. [2024-11-20 22:44:57,841 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-20 22:44:57,842 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2260 states and 4247 transitions. [2024-11-20 22:44:57,854 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1125 [2024-11-20 22:44:57,854 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:57,854 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:57,858 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:57,858 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:57,859 INFO L745 eck$LassoCheckResult]: Stem: 4966#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4967#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 6044#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5552#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 5553#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 5554#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 5555#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 4819#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 4820#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 4990#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4991#L3009 assume 0 == initPersonOnFloor_~floor#1; 6172#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5060#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 6392#L2801 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5520#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 5712#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5352#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 5353#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 4616#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 4787#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 6771#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 5785#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 5018#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 5020#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 6834#L2073 assume !(0 != timeShift_~tmp___9~2#1); 5318#L2164 assume !(1 == ~doorState~0); 5319#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4620#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 4621#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 5006#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 6154#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 4753#L1892 assume !(1 == ~currentHeading~0); 4754#L1902 assume !(0 == ~currentFloorID~0); 4807#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4808#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6130#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 6189#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 6071#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 6072#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 5844#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 5845#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 4796#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 6281#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6324#L890-2 [2024-11-20 22:44:57,860 INFO L747 eck$LassoCheckResult]: Loop: 6324#L890-2 assume !false; 5956#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 5957#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 6033#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 5801#L898 assume 1 != cleanup_~tmp___0~1#1; 5802#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 6151#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 5377#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 6010#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 4917#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 4918#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 6236#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 5051#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 4903#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 6250#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 5087#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 5088#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 5603#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 6171#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 6833#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 5642#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5643#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 6397#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 5826#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 4944#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 6282#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6724#L1892-3 assume !(1 == ~currentHeading~0); 6593#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5460#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5783#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5242#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 6460#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 5150#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 5151#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 6498#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 6499#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 5137#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5480#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6324#L890-2 [2024-11-20 22:44:57,860 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:57,860 INFO L85 PathProgramCache]: Analyzing trace with hash -788278422, now seen corresponding path program 1 times [2024-11-20 22:44:57,861 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:57,861 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [62233037] [2024-11-20 22:44:57,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:57,861 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:57,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:57,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:58,000 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:58,000 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [62233037] [2024-11-20 22:44:58,000 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [62233037] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:58,000 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:58,000 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:58,001 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [358549919] [2024-11-20 22:44:58,001 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:58,001 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:58,001 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:58,002 INFO L85 PathProgramCache]: Analyzing trace with hash -468858600, now seen corresponding path program 1 times [2024-11-20 22:44:58,002 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:58,002 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1045664548] [2024-11-20 22:44:58,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:58,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:58,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:58,120 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:58,120 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:58,121 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1045664548] [2024-11-20 22:44:58,121 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1045664548] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:58,121 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:58,121 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:58,122 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391663811] [2024-11-20 22:44:58,122 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:58,122 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:58,122 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:58,123 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-20 22:44:58,124 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-20 22:44:58,124 INFO L87 Difference]: Start difference. First operand 2260 states and 4247 transitions. cyclomatic complexity: 1988 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:59,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:44:59,272 INFO L93 Difference]: Finished difference Result 4562 states and 8491 transitions. [2024-11-20 22:44:59,272 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4562 states and 8491 transitions. [2024-11-20 22:44:59,301 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2305 [2024-11-20 22:44:59,326 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4562 states to 4562 states and 8491 transitions. [2024-11-20 22:44:59,326 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4562 [2024-11-20 22:44:59,331 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4562 [2024-11-20 22:44:59,331 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4562 states and 8491 transitions. [2024-11-20 22:44:59,336 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:44:59,337 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4562 states and 8491 transitions. [2024-11-20 22:44:59,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4562 states and 8491 transitions. [2024-11-20 22:44:59,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4562 to 4472. [2024-11-20 22:44:59,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4472 states, 4472 states have (on average 1.878577817531306) internal successors, (8401), 4471 states have internal predecessors, (8401), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:44:59,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4472 states to 4472 states and 8401 transitions. [2024-11-20 22:44:59,429 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4472 states and 8401 transitions. [2024-11-20 22:44:59,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-20 22:44:59,431 INFO L425 stractBuchiCegarLoop]: Abstraction has 4472 states and 8401 transitions. [2024-11-20 22:44:59,431 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-20 22:44:59,431 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4472 states and 8401 transitions. [2024-11-20 22:44:59,452 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2256 [2024-11-20 22:44:59,453 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:44:59,453 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:44:59,456 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:59,456 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:44:59,457 INFO L745 eck$LassoCheckResult]: Stem: 11806#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 11807#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 12941#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 12413#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 12414#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 12415#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 12416#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 11659#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 11660#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 11830#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 11831#L3009 assume 0 == initPersonOnFloor_~floor#1; 13088#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 11902#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 13332#L2801 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 13856#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 13953#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 13952#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 13950#L2738 assume !(0 == isFloorCalling_~floorID#1); 13951#L2742 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 13949#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 13948#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 13825#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 12661#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 11858#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 11860#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 11938#L2073 assume !(0 != timeShift_~tmp___9~2#1); 12167#L2164 assume !(1 == ~doorState~0); 12168#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 13469#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 14013#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 13998#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 13996#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 13994#L1892 assume !(1 == ~currentHeading~0); 13993#L1902 assume !(0 == ~currentFloorID~0); 13991#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13979#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 13978#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 13977#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 13976#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 13975#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 13974#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 13154#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 11636#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 13822#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 13823#L890-2 [2024-11-20 22:44:59,457 INFO L747 eck$LassoCheckResult]: Loop: 13823#L890-2 assume !false; 12844#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 12845#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 12928#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 12929#L898 assume 1 != cleanup_~tmp___0~1#1; 13061#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 13062#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 13956#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 12904#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 12905#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 14618#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 14617#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 14616#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 14615#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 14611#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 14610#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 14071#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 14067#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 14066#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 14065#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 14064#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 14063#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 14062#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 14061#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 14056#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 14051#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 14049#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 14050#L1892-3 assume !(1 == ~currentHeading~0); 14029#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 14026#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 12960#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 12090#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 13410#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 11992#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 11993#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 13455#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 13456#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 11979#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 13847#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 13823#L890-2 [2024-11-20 22:44:59,458 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:59,461 INFO L85 PathProgramCache]: Analyzing trace with hash 260318243, now seen corresponding path program 1 times [2024-11-20 22:44:59,461 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:59,461 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1965111695] [2024-11-20 22:44:59,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:59,461 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:59,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:59,543 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:59,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:59,544 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1965111695] [2024-11-20 22:44:59,544 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1965111695] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:59,544 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:59,544 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:44:59,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1658738900] [2024-11-20 22:44:59,545 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:59,545 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:44:59,545 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:44:59,545 INFO L85 PathProgramCache]: Analyzing trace with hash 340613729, now seen corresponding path program 1 times [2024-11-20 22:44:59,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:44:59,546 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1009746187] [2024-11-20 22:44:59,546 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:44:59,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:44:59,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:44:59,660 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:44:59,660 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:44:59,661 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1009746187] [2024-11-20 22:44:59,661 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1009746187] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:44:59,661 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:44:59,661 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:44:59,661 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [534431605] [2024-11-20 22:44:59,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:44:59,662 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:44:59,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:44:59,662 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-20 22:44:59,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-20 22:44:59,663 INFO L87 Difference]: Start difference. First operand 4472 states and 8401 transitions. cyclomatic complexity: 3930 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:01,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:01,425 INFO L93 Difference]: Finished difference Result 8000 states and 15010 transitions. [2024-11-20 22:45:01,425 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 8000 states and 15010 transitions. [2024-11-20 22:45:01,476 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4072 [2024-11-20 22:45:01,521 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 8000 states to 8000 states and 15010 transitions. [2024-11-20 22:45:01,522 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 8000 [2024-11-20 22:45:01,533 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 8000 [2024-11-20 22:45:01,534 INFO L73 IsDeterministic]: Start isDeterministic. Operand 8000 states and 15010 transitions. [2024-11-20 22:45:01,545 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:01,546 INFO L218 hiAutomatonCegarLoop]: Abstraction has 8000 states and 15010 transitions. [2024-11-20 22:45:01,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8000 states and 15010 transitions. [2024-11-20 22:45:01,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8000 to 7982. [2024-11-20 22:45:01,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7982 states, 7982 states have (on average 1.8767226259082936) internal successors, (14980), 7981 states have internal predecessors, (14980), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:01,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7982 states to 7982 states and 14980 transitions. [2024-11-20 22:45:01,769 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7982 states and 14980 transitions. [2024-11-20 22:45:01,770 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-20 22:45:01,770 INFO L425 stractBuchiCegarLoop]: Abstraction has 7982 states and 14980 transitions. [2024-11-20 22:45:01,770 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-20 22:45:01,770 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7982 states and 14980 transitions. [2024-11-20 22:45:01,802 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4063 [2024-11-20 22:45:01,802 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:01,802 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:01,805 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:01,805 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:01,806 INFO L745 eck$LassoCheckResult]: Stem: 24298#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 24299#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 25415#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 24903#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 24904#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 24905#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 24906#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 24151#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 24152#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 24322#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 24323#L3009 assume 0 == initPersonOnFloor_~floor#1; 25553#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 24393#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 25787#L2801 assume !(0 == callOnFloor_~floorID#1); 26123#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 24871#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 25067#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24696#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 24697#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 24118#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 24119#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 30176#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 30177#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 30865#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 30866#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 31788#L2073 assume !(0 != timeShift_~tmp___9~2#1); 31787#L2164 assume !(1 == ~doorState~0); 31786#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 31785#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 31767#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 31754#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 31752#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 31753#L1892 assume !(1 == ~currentHeading~0); 31886#L1902 assume !(0 == ~currentFloorID~0); 24139#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 24140#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26492#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 26491#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 26488#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 26486#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 26487#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 26470#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 26460#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 26458#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 26457#L890-2 [2024-11-20 22:45:01,807 INFO L747 eck$LassoCheckResult]: Loop: 26457#L890-2 assume !false; 26456#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 26455#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 26454#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 26453#L898 assume 1 != cleanup_~tmp___0~1#1; 26452#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 26447#L2738-21 assume !(0 == isFloorCalling_~floorID#1); 26437#L2742-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 26424#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 26413#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 26408#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 26407#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 26406#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 26405#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 26404#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 26403#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 26401#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 26397#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 26395#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 26394#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 26388#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 26382#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 26381#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 26360#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 26348#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 26335#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 26334#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 26249#L1892-3 assume !(1 == ~currentHeading~0); 26250#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24807#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25139#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26510#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 26508#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 26505#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 26503#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 26504#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 26481#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 26461#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 26459#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 26457#L890-2 [2024-11-20 22:45:01,807 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:01,807 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 1 times [2024-11-20 22:45:01,807 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:01,808 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [873764561] [2024-11-20 22:45:01,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:01,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:01,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:01,883 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:01,883 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:01,883 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [873764561] [2024-11-20 22:45:01,884 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [873764561] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:01,884 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:01,884 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:01,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [739013989] [2024-11-20 22:45:01,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:01,885 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:01,885 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:01,885 INFO L85 PathProgramCache]: Analyzing trace with hash 490707539, now seen corresponding path program 1 times [2024-11-20 22:45:01,885 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:01,887 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1868098757] [2024-11-20 22:45:01,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:01,888 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:01,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:01,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:01,918 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:01,918 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1868098757] [2024-11-20 22:45:01,919 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1868098757] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:01,919 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:01,922 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:01,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2060782848] [2024-11-20 22:45:01,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:01,922 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:01,923 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:01,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:45:01,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:45:01,925 INFO L87 Difference]: Start difference. First operand 7982 states and 14980 transitions. cyclomatic complexity: 6999 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:02,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:02,416 INFO L93 Difference]: Finished difference Result 7828 states and 14664 transitions. [2024-11-20 22:45:02,416 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 7828 states and 14664 transitions. [2024-11-20 22:45:02,451 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3941 [2024-11-20 22:45:02,491 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 7828 states to 7828 states and 14664 transitions. [2024-11-20 22:45:02,492 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 7828 [2024-11-20 22:45:02,502 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 7828 [2024-11-20 22:45:02,503 INFO L73 IsDeterministic]: Start isDeterministic. Operand 7828 states and 14664 transitions. [2024-11-20 22:45:02,516 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:02,516 INFO L218 hiAutomatonCegarLoop]: Abstraction has 7828 states and 14664 transitions. [2024-11-20 22:45:02,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7828 states and 14664 transitions. [2024-11-20 22:45:02,727 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7828 to 7828. [2024-11-20 22:45:02,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7828 states, 7828 states have (on average 1.8732754215636178) internal successors, (14664), 7827 states have internal predecessors, (14664), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:02,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7828 states to 7828 states and 14664 transitions. [2024-11-20 22:45:02,763 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7828 states and 14664 transitions. [2024-11-20 22:45:02,764 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:45:02,764 INFO L425 stractBuchiCegarLoop]: Abstraction has 7828 states and 14664 transitions. [2024-11-20 22:45:02,765 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-20 22:45:02,765 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7828 states and 14664 transitions. [2024-11-20 22:45:02,792 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3941 [2024-11-20 22:45:02,793 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:02,793 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:02,795 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:02,795 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:02,796 INFO L745 eck$LassoCheckResult]: Stem: 40105#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 40106#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 41194#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 40688#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 40689#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 40690#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 40691#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 39960#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 39961#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 40130#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 40131#L3009 assume 0 == initPersonOnFloor_~floor#1; 41326#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 40198#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 41558#L2801 assume !(0 == callOnFloor_~floorID#1); 41877#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 40659#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 42202#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 42201#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 42199#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 42198#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 42197#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 42195#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 42191#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 42189#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 42188#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 42186#L2073 assume !(0 != timeShift_~tmp___9~2#1); 42185#L2164 assume !(1 == ~doorState~0); 42173#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 42153#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 42139#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 42126#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 42124#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 42125#L1892 assume !(1 == ~currentHeading~0); 42500#L1902 assume !(0 == ~currentFloorID~0); 42498#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 42411#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 42409#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 42408#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 42407#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 42406#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 42405#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 42361#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 42349#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 42346#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 42344#L890-2 [2024-11-20 22:45:02,796 INFO L747 eck$LassoCheckResult]: Loop: 42344#L890-2 assume !false; 42342#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 42340#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 42338#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 42336#L898 assume 1 != cleanup_~tmp___0~1#1; 42334#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 42333#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 42332#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 42208#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 42210#L1424 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 42301#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 42300#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 42299#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 42297#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 42296#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 42295#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 42293#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 42289#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 42287#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 42286#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 42284#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 42282#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 42266#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 42243#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 42229#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 42216#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 42215#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 42213#L1892-3 assume !(1 == ~currentHeading~0); 42211#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 42212#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42624#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 42622#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 42621#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 42430#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 42428#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 42429#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 42372#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 42350#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 42347#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 42344#L890-2 [2024-11-20 22:45:02,797 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:02,797 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 2 times [2024-11-20 22:45:02,797 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:02,797 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [802613950] [2024-11-20 22:45:02,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:02,798 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:02,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:02,856 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:02,856 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:02,856 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [802613950] [2024-11-20 22:45:02,856 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [802613950] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:02,857 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:02,857 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:02,857 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [536135134] [2024-11-20 22:45:02,857 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:02,857 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:02,858 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:02,858 INFO L85 PathProgramCache]: Analyzing trace with hash -1458560194, now seen corresponding path program 1 times [2024-11-20 22:45:02,858 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:02,858 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [252968390] [2024-11-20 22:45:02,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:02,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:02,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:02,908 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:02,909 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:02,909 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [252968390] [2024-11-20 22:45:02,909 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [252968390] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:02,909 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:02,909 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:45:02,910 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [577375038] [2024-11-20 22:45:02,910 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:02,910 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:02,910 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:02,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:45:02,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:45:02,913 INFO L87 Difference]: Start difference. First operand 7828 states and 14664 transitions. cyclomatic complexity: 6837 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:03,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:03,216 INFO L93 Difference]: Finished difference Result 14335 states and 26840 transitions. [2024-11-20 22:45:03,216 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14335 states and 26840 transitions. [2024-11-20 22:45:03,274 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2024-11-20 22:45:03,331 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14335 states to 14335 states and 26840 transitions. [2024-11-20 22:45:03,332 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14335 [2024-11-20 22:45:03,352 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14335 [2024-11-20 22:45:03,352 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14335 states and 26840 transitions. [2024-11-20 22:45:03,371 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:03,371 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26840 transitions. [2024-11-20 22:45:03,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14335 states and 26840 transitions. [2024-11-20 22:45:03,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14335 to 14335. [2024-11-20 22:45:03,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14335 states, 14335 states have (on average 1.872340425531915) internal successors, (26840), 14334 states have internal predecessors, (26840), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:03,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14335 states to 14335 states and 26840 transitions. [2024-11-20 22:45:03,684 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26840 transitions. [2024-11-20 22:45:03,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:45:03,685 INFO L425 stractBuchiCegarLoop]: Abstraction has 14335 states and 26840 transitions. [2024-11-20 22:45:03,685 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-20 22:45:03,686 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14335 states and 26840 transitions. [2024-11-20 22:45:03,747 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2024-11-20 22:45:03,747 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:03,747 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:03,752 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:03,752 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:03,753 INFO L745 eck$LassoCheckResult]: Stem: 62281#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 62282#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 63362#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 62863#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 62864#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 62865#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 62866#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 62135#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 62136#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 62301#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 62302#L3009 assume 0 == initPersonOnFloor_~floor#1; 63491#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 62372#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 63719#L2801 assume !(0 == callOnFloor_~floorID#1); 64037#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 62833#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 63025#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 62666#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 62667#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 64657#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 64656#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 64654#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 64649#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 64643#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 64459#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 64453#L2073 assume !(0 != timeShift_~tmp___9~2#1); 64451#L2164 assume !(1 == ~doorState~0); 64450#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 64448#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 64343#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 64327#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 64319#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 64312#L1892 assume !(1 == ~currentHeading~0); 64303#L1902 assume !(0 == ~currentFloorID~0); 64297#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 64293#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 64290#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 64288#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 64281#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 64279#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 64280#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 64236#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 64228#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 64220#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 64221#L890-2 [2024-11-20 22:45:03,754 INFO L747 eck$LassoCheckResult]: Loop: 64221#L890-2 assume !false; 64216#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 64217#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 64212#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 64213#L898 assume 1 != cleanup_~tmp___0~1#1; 64208#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 64209#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 64204#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 64205#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 64198#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 64200#L2738-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 65051#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 65044#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 65036#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 65034#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 65032#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 65031#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 65030#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 65029#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 65027#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 65023#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 65021#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 65020#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 65014#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 65012#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 65011#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 65009#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 64745#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 64729#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 64721#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 64714#L1892-3 assume !(1 == ~currentHeading~0); 64705#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 64699#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 64695#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 64693#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 64291#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 64289#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 64284#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 64285#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 64248#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 64240#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 64222#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 64221#L890-2 [2024-11-20 22:45:03,754 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:03,754 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 3 times [2024-11-20 22:45:03,755 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:03,755 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1481465602] [2024-11-20 22:45:03,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:03,755 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:03,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:03,827 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:03,828 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:03,828 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1481465602] [2024-11-20 22:45:03,828 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1481465602] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:03,828 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:03,828 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:03,829 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [947569176] [2024-11-20 22:45:03,829 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:03,829 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:03,830 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:03,830 INFO L85 PathProgramCache]: Analyzing trace with hash 563705072, now seen corresponding path program 1 times [2024-11-20 22:45:03,830 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:03,830 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1164890117] [2024-11-20 22:45:03,830 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:03,831 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:03,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:03,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:03,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:03,869 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1164890117] [2024-11-20 22:45:03,869 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1164890117] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:03,870 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:03,870 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:03,870 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [509223573] [2024-11-20 22:45:03,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:03,870 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:03,870 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:03,871 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:45:03,871 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:45:03,871 INFO L87 Difference]: Start difference. First operand 14335 states and 26840 transitions. cyclomatic complexity: 12506 Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:04,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:04,415 INFO L93 Difference]: Finished difference Result 14335 states and 26696 transitions. [2024-11-20 22:45:04,415 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14335 states and 26696 transitions. [2024-11-20 22:45:04,470 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2024-11-20 22:45:04,666 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14335 states to 14335 states and 26696 transitions. [2024-11-20 22:45:04,666 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14335 [2024-11-20 22:45:04,693 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14335 [2024-11-20 22:45:04,693 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14335 states and 26696 transitions. [2024-11-20 22:45:04,707 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:04,707 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26696 transitions. [2024-11-20 22:45:04,721 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14335 states and 26696 transitions. [2024-11-20 22:45:04,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14335 to 14335. [2024-11-20 22:45:04,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14335 states, 14335 states have (on average 1.862295081967213) internal successors, (26696), 14334 states have internal predecessors, (26696), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:04,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14335 states to 14335 states and 26696 transitions. [2024-11-20 22:45:04,898 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26696 transitions. [2024-11-20 22:45:04,898 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:45:04,899 INFO L425 stractBuchiCegarLoop]: Abstraction has 14335 states and 26696 transitions. [2024-11-20 22:45:04,899 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-20 22:45:04,899 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14335 states and 26696 transitions. [2024-11-20 22:45:04,937 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2024-11-20 22:45:04,938 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:04,938 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:04,942 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:04,942 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:04,942 INFO L745 eck$LassoCheckResult]: Stem: 90955#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 90956#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 92065#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 91542#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 91543#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 91544#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 91545#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 90811#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 90812#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 90976#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 90977#L3009 assume 0 == initPersonOnFloor_~floor#1; 92202#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 91048#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 92445#L2801 assume !(0 == callOnFloor_~floorID#1); 92792#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 91510#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 93272#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 93271#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 93269#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 93268#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 93267#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 93265#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 93261#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 93260#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 93259#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 93258#L2073 assume !(0 != timeShift_~tmp___9~2#1); 93257#L2164 assume !(1 == ~doorState~0); 93256#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 93250#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 93136#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 93120#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 93112#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 93105#L1892 assume !(1 == ~currentHeading~0); 93096#L1902 assume !(0 == ~currentFloorID~0); 93090#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 93086#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 93083#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 93080#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 93081#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 94745#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 93057#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 93058#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 93023#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 93024#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 94698#L890-2 [2024-11-20 22:45:04,943 INFO L747 eck$LassoCheckResult]: Loop: 94698#L890-2 assume !false; 94697#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 94696#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 94695#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 94694#L898 assume 1 != cleanup_~tmp___0~1#1; 94693#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 94692#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 94691#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 94689#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 94687#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 94686#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 94682#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 94681#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 91869#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 91305#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 94673#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 94621#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 94622#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 94663#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 94662#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 94660#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 94656#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 94654#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 94650#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 94646#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 94637#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 94636#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 94634#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 94559#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 94546#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 94543#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 94544#L1892-3 assume !(1 == ~currentHeading~0); 94251#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 94245#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 93476#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 93475#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 94715#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 94714#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 94713#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 93069#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 93070#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 94700#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 94699#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 94698#L890-2 [2024-11-20 22:45:04,943 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:04,943 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 4 times [2024-11-20 22:45:04,944 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:04,944 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [553178805] [2024-11-20 22:45:04,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:04,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:04,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:04,996 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:04,997 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:04,997 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [553178805] [2024-11-20 22:45:04,997 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [553178805] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:04,997 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:04,997 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:04,997 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [154340] [2024-11-20 22:45:04,998 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:04,998 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:04,998 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:04,998 INFO L85 PathProgramCache]: Analyzing trace with hash -1440860298, now seen corresponding path program 1 times [2024-11-20 22:45:04,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:04,999 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [994078058] [2024-11-20 22:45:04,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:04,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:05,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:05,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:05,150 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:05,150 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [994078058] [2024-11-20 22:45:05,151 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [994078058] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:05,151 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:05,151 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:45:05,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821566050] [2024-11-20 22:45:05,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:05,151 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:05,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:05,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:45:05,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:45:05,152 INFO L87 Difference]: Start difference. First operand 14335 states and 26696 transitions. cyclomatic complexity: 12362 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:05,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:05,329 INFO L93 Difference]: Finished difference Result 14364 states and 26725 transitions. [2024-11-20 22:45:05,329 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14364 states and 26725 transitions. [2024-11-20 22:45:05,378 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7838 [2024-11-20 22:45:05,435 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14364 states to 14364 states and 26725 transitions. [2024-11-20 22:45:05,435 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14364 [2024-11-20 22:45:05,451 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14364 [2024-11-20 22:45:05,451 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14364 states and 26725 transitions. [2024-11-20 22:45:05,470 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:05,471 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14364 states and 26725 transitions. [2024-11-20 22:45:05,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14364 states and 26725 transitions. [2024-11-20 22:45:05,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14364 to 14353. [2024-11-20 22:45:05,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14353 states, 14353 states have (on average 1.8612136835504773) internal successors, (26714), 14352 states have internal predecessors, (26714), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:05,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14353 states to 14353 states and 26714 transitions. [2024-11-20 22:45:05,832 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14353 states and 26714 transitions. [2024-11-20 22:45:05,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:45:05,833 INFO L425 stractBuchiCegarLoop]: Abstraction has 14353 states and 26714 transitions. [2024-11-20 22:45:05,833 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-20 22:45:05,833 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14353 states and 26714 transitions. [2024-11-20 22:45:05,880 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7832 [2024-11-20 22:45:05,881 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:05,881 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:05,885 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:05,885 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:05,886 INFO L745 eck$LassoCheckResult]: Stem: 119663#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 119664#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 120758#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 120249#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 120250#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 120251#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 120252#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 119518#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 119519#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 119683#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 119684#L3009 assume 0 == initPersonOnFloor_~floor#1; 120891#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 119754#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 121133#L2801 assume !(0 == callOnFloor_~floorID#1); 121469#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 120217#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 121957#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 121956#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 121954#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 121955#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 121958#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 121948#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 121943#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 121941#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 121939#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 121934#L2073 assume !(0 != timeShift_~tmp___9~2#1); 121932#L2164 assume !(1 == ~doorState~0); 121929#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 121926#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 121927#L1685 assume !(0 == ~currentFloorID~0); 121199#L1691 assume !(~currentFloorID~0 > 0); 121201#$Ultimate##2092 assume ~currentFloorID~0 > 0; 120128#L1708 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 120130#L1709 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 121155#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 132399#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 132396#L1892 assume !(1 == ~currentHeading~0); 132394#L1902 assume !(0 == ~currentFloorID~0); 132390#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 132381#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 132377#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 132376#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 132374#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 132372#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 132371#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 132368#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 132359#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 132348#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 132345#L890-2 [2024-11-20 22:45:05,886 INFO L747 eck$LassoCheckResult]: Loop: 132345#L890-2 assume !false; 132343#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 132341#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 132339#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 132337#L898 assume 1 != cleanup_~tmp___0~1#1; 132335#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 132333#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 132331#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 132327#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 121163#L1424 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 121164#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 132824#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 132822#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 132817#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 132818#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 133465#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 133467#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 133475#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 133470#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 133469#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 133463#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 133464#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 120344#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 120345#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 121138#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 121139#L1685-2 assume !(0 == ~currentFloorID~0); 120531#L1691-2 assume !(~currentFloorID~0 > 0); 120084#$Ultimate##4542 assume ~currentFloorID~0 > 0; 120086#L1708-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 121394#L1709-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 119640#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 133575#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 133574#L1892-3 assume !(1 == ~currentHeading~0); 121356#L1902-9 assume !(0 == ~currentFloorID~0); 120156#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 120486#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 119939#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 121208#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 119845#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 119846#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 121249#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 121250#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 119832#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 120176#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 132345#L890-2 [2024-11-20 22:45:05,886 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:05,887 INFO L85 PathProgramCache]: Analyzing trace with hash -392297214, now seen corresponding path program 1 times [2024-11-20 22:45:05,887 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:05,888 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [625862547] [2024-11-20 22:45:05,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:05,889 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:05,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:05,957 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:05,957 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:05,959 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [625862547] [2024-11-20 22:45:05,959 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [625862547] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:05,959 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:05,959 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:05,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1702641052] [2024-11-20 22:45:05,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:05,960 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:05,960 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:05,960 INFO L85 PathProgramCache]: Analyzing trace with hash 367395542, now seen corresponding path program 1 times [2024-11-20 22:45:05,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:05,960 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [101244424] [2024-11-20 22:45:05,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:05,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:05,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:06,004 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:06,005 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:06,005 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [101244424] [2024-11-20 22:45:06,006 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [101244424] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:06,007 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:06,007 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:45:06,007 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [459327978] [2024-11-20 22:45:06,007 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:06,007 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:06,007 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:06,008 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:45:06,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:45:06,008 INFO L87 Difference]: Start difference. First operand 14353 states and 26714 transitions. cyclomatic complexity: 12362 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:07,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:07,019 INFO L93 Difference]: Finished difference Result 10860 states and 20093 transitions. [2024-11-20 22:45:07,019 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10860 states and 20093 transitions. [2024-11-20 22:45:07,070 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7885 [2024-11-20 22:45:07,107 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10860 states to 10860 states and 20093 transitions. [2024-11-20 22:45:07,108 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10860 [2024-11-20 22:45:07,118 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10860 [2024-11-20 22:45:07,118 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10860 states and 20093 transitions. [2024-11-20 22:45:07,134 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:07,135 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10860 states and 20093 transitions. [2024-11-20 22:45:07,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10860 states and 20093 transitions. [2024-11-20 22:45:07,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10860 to 10851. [2024-11-20 22:45:07,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10851 states, 10851 states have (on average 1.8503363745276933) internal successors, (20078), 10850 states have internal predecessors, (20078), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:07,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10851 states to 10851 states and 20078 transitions. [2024-11-20 22:45:07,320 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10851 states and 20078 transitions. [2024-11-20 22:45:07,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-20 22:45:07,321 INFO L425 stractBuchiCegarLoop]: Abstraction has 10851 states and 20078 transitions. [2024-11-20 22:45:07,321 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-20 22:45:07,321 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10851 states and 20078 transitions. [2024-11-20 22:45:07,369 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7876 [2024-11-20 22:45:07,369 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:07,369 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:07,371 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:07,371 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:07,372 INFO L745 eck$LassoCheckResult]: Stem: 144867#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 144868#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 145870#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 145398#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 145399#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 145400#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 145401#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 144730#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 144731#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 144887#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 144888#L3009 assume 0 == initPersonOnFloor_~floor#1; 145997#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 144942#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 146230#L2801 assume !(0 == callOnFloor_~floorID#1); 146538#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 145371#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 146700#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 146699#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 146698#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 146697#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 146696#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 146626#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 145973#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 144911#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 144913#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 146695#L2073 assume !(0 != timeShift_~tmp___9~2#1); 145184#L2164 assume !(1 == ~doorState~0); 145185#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 144549#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 144550#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 145219#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 145980#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 145901#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 145902#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 145416#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 145417#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 144630#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 144529#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 144530#L1892-2 assume !(1 == ~currentHeading~0); 145788#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 145789#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 146158#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 145954#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 149085#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 149084#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 149083#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 149082#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 149079#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 149070#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 149007#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 149006#L890-2 [2024-11-20 22:45:07,372 INFO L747 eck$LassoCheckResult]: Loop: 149006#L890-2 assume !false; 149005#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 149004#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 149002#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 148999#L898 assume 1 != cleanup_~tmp___0~1#1; 148997#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 148994#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 148993#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 148991#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 148989#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 148988#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 148968#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 148966#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 148947#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 148928#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 148926#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 148924#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 148921#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 148920#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 148919#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 148918#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 148917#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 148915#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 148914#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 148912#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 148911#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 148910#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 148908#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 145659#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 145660#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 148682#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 148681#L1947-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 148680#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 148678#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 148595#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 148589#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 148585#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 148586#L1892-5 assume !(1 == ~currentHeading~0); 152117#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 148568#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 148565#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 148562#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 149039#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 149034#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 149032#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 149031#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 149022#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 149009#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 149008#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 149006#L890-2 [2024-11-20 22:45:07,373 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:07,373 INFO L85 PathProgramCache]: Analyzing trace with hash 1761456702, now seen corresponding path program 1 times [2024-11-20 22:45:07,374 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:07,374 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569417682] [2024-11-20 22:45:07,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:07,374 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:07,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:07,458 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:07,459 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:07,459 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569417682] [2024-11-20 22:45:07,459 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569417682] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:07,459 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:07,459 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:07,460 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1148886089] [2024-11-20 22:45:07,460 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:07,460 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:07,461 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:07,461 INFO L85 PathProgramCache]: Analyzing trace with hash 279913123, now seen corresponding path program 1 times [2024-11-20 22:45:07,461 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:07,461 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [871747436] [2024-11-20 22:45:07,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:07,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:07,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:07,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:07,608 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:07,608 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [871747436] [2024-11-20 22:45:07,608 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [871747436] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:07,609 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:07,609 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:45:07,609 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1032848153] [2024-11-20 22:45:07,609 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:07,609 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:07,609 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:07,610 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:45:07,610 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:45:07,610 INFO L87 Difference]: Start difference. First operand 10851 states and 20078 transitions. cyclomatic complexity: 9228 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:07,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:07,699 INFO L93 Difference]: Finished difference Result 10869 states and 20096 transitions. [2024-11-20 22:45:07,699 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10869 states and 20096 transitions. [2024-11-20 22:45:07,735 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7891 [2024-11-20 22:45:07,757 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10869 states to 10869 states and 20096 transitions. [2024-11-20 22:45:07,758 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10869 [2024-11-20 22:45:07,765 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10869 [2024-11-20 22:45:07,765 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10869 states and 20096 transitions. [2024-11-20 22:45:07,780 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:07,781 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10869 states and 20096 transitions. [2024-11-20 22:45:07,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10869 states and 20096 transitions. [2024-11-20 22:45:07,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10869 to 10863. [2024-11-20 22:45:07,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10863 states, 10863 states have (on average 1.849397035809629) internal successors, (20090), 10862 states have internal predecessors, (20090), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:07,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10863 states to 10863 states and 20090 transitions. [2024-11-20 22:45:07,914 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10863 states and 20090 transitions. [2024-11-20 22:45:07,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:45:07,915 INFO L425 stractBuchiCegarLoop]: Abstraction has 10863 states and 20090 transitions. [2024-11-20 22:45:07,915 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-20 22:45:07,916 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10863 states and 20090 transitions. [2024-11-20 22:45:07,949 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7886 [2024-11-20 22:45:07,949 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:07,950 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:07,951 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:07,951 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:07,951 INFO L745 eck$LassoCheckResult]: Stem: 166598#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 166599#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 167602#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 167129#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 167130#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 167131#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 167132#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 166459#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 166460#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 166622#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 166623#L3009 assume 0 == initPersonOnFloor_~floor#1; 167728#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 166673#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 167962#L2801 assume !(0 == callOnFloor_~floorID#1); 168279#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 167099#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 168462#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 168461#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 168460#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 168459#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 168458#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 168376#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 167706#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 166642#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 166644#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 168457#L2073 assume !(0 != timeShift_~tmp___9~2#1); 166912#L2164 assume !(1 == ~doorState~0); 166913#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 166277#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 166278#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 166949#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 167712#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 167632#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 167634#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 167985#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 167507#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 166357#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 166257#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 166258#L1892-2 assume !(1 == ~currentHeading~0); 167519#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 167520#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 167888#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 167687#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 168513#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 168514#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 168508#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 168509#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 168488#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 168478#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 168479#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 171611#L890-2 [2024-11-20 22:45:07,952 INFO L747 eck$LassoCheckResult]: Loop: 171611#L890-2 assume !false; 171606#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 168472#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 168471#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 168469#L898 assume 1 != cleanup_~tmp___0~1#1; 168470#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 171557#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 171553#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 171547#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 171548#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 173681#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 176888#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 176887#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 176842#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 176833#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 176831#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 176829#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 176828#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 172589#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 172588#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 172587#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 172586#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 172584#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 172583#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 172581#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 167218#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 167219#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 167968#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 167388#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 167389#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 167843#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 167797#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 167799#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 177005#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 168455#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 167207#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 166515#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 166516#L1892-5 assume !(1 == ~currentHeading~0); 168226#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 166360#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 170379#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 170376#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 176782#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 176781#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 176779#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 176777#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 176774#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 176765#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 176764#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 171611#L890-2 [2024-11-20 22:45:07,952 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:07,952 INFO L85 PathProgramCache]: Analyzing trace with hash 1761456702, now seen corresponding path program 2 times [2024-11-20 22:45:07,952 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:07,953 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1817300543] [2024-11-20 22:45:07,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:07,953 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:07,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:08,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:08,015 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:08,015 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1817300543] [2024-11-20 22:45:08,015 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1817300543] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:08,015 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:08,015 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:08,016 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [694676078] [2024-11-20 22:45:08,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:08,016 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:08,016 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:08,017 INFO L85 PathProgramCache]: Analyzing trace with hash -1714231583, now seen corresponding path program 1 times [2024-11-20 22:45:08,017 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:08,017 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [346717101] [2024-11-20 22:45:08,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:08,017 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:08,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:08,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:08,165 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:08,165 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [346717101] [2024-11-20 22:45:08,165 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [346717101] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:08,165 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:08,165 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:45:08,165 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [543155257] [2024-11-20 22:45:08,165 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:08,166 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:08,166 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:08,167 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:45:08,167 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:45:08,167 INFO L87 Difference]: Start difference. First operand 10863 states and 20090 transitions. cyclomatic complexity: 9228 Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:08,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:08,331 INFO L93 Difference]: Finished difference Result 12484 states and 22812 transitions. [2024-11-20 22:45:08,331 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 12484 states and 22812 transitions. [2024-11-20 22:45:08,388 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9344 [2024-11-20 22:45:08,421 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 12484 states to 12484 states and 22812 transitions. [2024-11-20 22:45:08,421 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12484 [2024-11-20 22:45:08,428 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12484 [2024-11-20 22:45:08,429 INFO L73 IsDeterministic]: Start isDeterministic. Operand 12484 states and 22812 transitions. [2024-11-20 22:45:08,437 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:08,437 INFO L218 hiAutomatonCegarLoop]: Abstraction has 12484 states and 22812 transitions. [2024-11-20 22:45:08,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12484 states and 22812 transitions. [2024-11-20 22:45:08,543 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12484 to 12459. [2024-11-20 22:45:08,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12459 states, 12459 states have (on average 1.828878722208845) internal successors, (22786), 12458 states have internal predecessors, (22786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:08,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12459 states to 12459 states and 22786 transitions. [2024-11-20 22:45:08,585 INFO L240 hiAutomatonCegarLoop]: Abstraction has 12459 states and 22786 transitions. [2024-11-20 22:45:08,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:45:08,586 INFO L425 stractBuchiCegarLoop]: Abstraction has 12459 states and 22786 transitions. [2024-11-20 22:45:08,586 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-20 22:45:08,586 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12459 states and 22786 transitions. [2024-11-20 22:45:08,627 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9319 [2024-11-20 22:45:08,627 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:08,627 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:08,628 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:08,628 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:08,628 INFO L745 eck$LassoCheckResult]: Stem: 189958#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 189959#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 190992#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 190503#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 190504#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 190501#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 190502#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 189819#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 189820#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 189978#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 189979#L3009 assume 0 == initPersonOnFloor_~floor#1; 191125#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 190033#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 191362#L2801 assume !(0 == callOnFloor_~floorID#1); 191702#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 190473#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 191935#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 191934#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 191933#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 191932#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 191931#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 191811#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 191099#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 190002#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 190004#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 191929#L2073 assume !(0 != timeShift_~tmp___9~2#1); 190280#L2164 assume !(1 == ~doorState~0); 190282#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 191496#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 191742#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 190318#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 191106#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 191022#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 191024#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 191938#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 190888#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 189719#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 189617#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 189618#L1892-2 assume !(1 == ~currentHeading~0); 190904#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 190905#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 191291#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 191972#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 194551#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 194544#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 194543#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 191965#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 191966#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 194506#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 194454#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 194453#L890-2 [2024-11-20 22:45:08,629 INFO L747 eck$LassoCheckResult]: Loop: 194453#L890-2 assume !false; 194452#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 194451#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 194450#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 194449#L898 assume 1 != cleanup_~tmp___0~1#1; 194448#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 194447#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 194446#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 194444#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 194442#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 194441#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 194425#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 194420#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 194386#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 194358#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 194355#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 194352#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 194343#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 194218#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 194217#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 194216#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 194215#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 194213#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 194212#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 194211#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 194209#L2164-3 assume !(1 == ~doorState~0); 194208#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 194207#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 194203#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 193959#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 194201#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 193947#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 194199#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 194197#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 194013#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 193956#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 193950#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 193941#L1892-5 assume !(1 == ~currentHeading~0); 193932#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 193925#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 193921#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 193919#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 194673#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 194499#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 194474#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 194472#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 194465#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 194456#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 194455#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 194453#L890-2 [2024-11-20 22:45:08,629 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:08,630 INFO L85 PathProgramCache]: Analyzing trace with hash 1761456702, now seen corresponding path program 3 times [2024-11-20 22:45:08,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:08,630 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [201314131] [2024-11-20 22:45:08,630 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:08,630 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:08,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:08,678 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:08,679 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:08,679 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [201314131] [2024-11-20 22:45:08,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [201314131] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:08,679 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:08,679 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:08,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1964267193] [2024-11-20 22:45:08,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:08,680 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:08,680 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:08,680 INFO L85 PathProgramCache]: Analyzing trace with hash -1848245089, now seen corresponding path program 1 times [2024-11-20 22:45:08,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:08,680 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1270265079] [2024-11-20 22:45:08,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:08,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:08,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:08,861 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:08,861 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:08,861 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1270265079] [2024-11-20 22:45:08,861 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1270265079] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:08,862 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:08,862 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:08,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1054930482] [2024-11-20 22:45:08,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:08,862 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:08,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:08,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-20 22:45:08,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2024-11-20 22:45:08,864 INFO L87 Difference]: Start difference. First operand 12459 states and 22786 transitions. cyclomatic complexity: 10328 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:09,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:09,903 INFO L93 Difference]: Finished difference Result 17145 states and 31327 transitions. [2024-11-20 22:45:09,903 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17145 states and 31327 transitions. [2024-11-20 22:45:09,980 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13989 [2024-11-20 22:45:10,029 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17145 states to 17145 states and 31327 transitions. [2024-11-20 22:45:10,029 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17145 [2024-11-20 22:45:10,044 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17145 [2024-11-20 22:45:10,044 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17145 states and 31327 transitions. [2024-11-20 22:45:10,055 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:10,055 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17145 states and 31327 transitions. [2024-11-20 22:45:10,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17145 states and 31327 transitions. [2024-11-20 22:45:10,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17145 to 15867. [2024-11-20 22:45:10,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15867 states, 15867 states have (on average 1.8351925379718914) internal successors, (29119), 15866 states have internal predecessors, (29119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:10,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15867 states to 15867 states and 29119 transitions. [2024-11-20 22:45:10,296 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15867 states and 29119 transitions. [2024-11-20 22:45:10,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-20 22:45:10,297 INFO L425 stractBuchiCegarLoop]: Abstraction has 15867 states and 29119 transitions. [2024-11-20 22:45:10,297 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-20 22:45:10,297 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15867 states and 29119 transitions. [2024-11-20 22:45:10,367 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:10,367 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:10,368 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:10,373 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:10,373 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:10,374 INFO L745 eck$LassoCheckResult]: Stem: 219579#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 219580#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 220611#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 220123#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 220124#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 220125#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 220126#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 219442#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 219443#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 219599#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 219600#L3009 assume 0 == initPersonOnFloor_~floor#1; 220745#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 219654#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 220991#L2801 assume !(0 == callOnFloor_~floorID#1); 221344#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 220096#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 221562#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 221561#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 221560#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 221559#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 221558#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 221448#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 220720#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 219623#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 219625#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 221557#L2073 assume !(0 != timeShift_~tmp___9~2#1); 219898#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 219899#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224509#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 224505#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 220542#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 224504#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 224448#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 224499#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224497#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 224458#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 224454#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 219240#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 219241#L1892-2 assume !(1 == ~currentHeading~0); 220520#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 220521#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 221165#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 220702#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 220763#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 220764#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 224439#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 224425#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 224430#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 224428#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 224423#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 224422#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 224421#L890-2 [2024-11-20 22:45:10,376 INFO L747 eck$LassoCheckResult]: Loop: 224421#L890-2 assume !false; 224414#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 224415#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 224405#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 224406#L898 assume 1 != cleanup_~tmp___0~1#1; 223577#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 223578#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 223543#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 223544#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 223486#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 223487#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 224727#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224728#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 224706#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 224699#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 224694#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 224695#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 224681#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 224676#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224673#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 224634#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 224635#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 224610#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 224607#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 224598#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 224600#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 224583#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 224582#L2164-3 assume !(1 == ~doorState~0); 224572#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224569#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 224269#L1685-2 assume !(0 == ~currentFloorID~0); 224237#L1691-2 assume ~currentFloorID~0 > 0; 224235#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 224236#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224268#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 224233#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 224234#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 224998#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 224981#L1892-3 assume !(1 == ~currentHeading~0); 224972#L1902-9 assume !(0 == ~currentFloorID~0); 224964#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 224961#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 224959#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 224958#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 224956#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 224788#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 224785#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 224782#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 224773#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 224559#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 224560#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 224416#L890-2 assume !false; 224417#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 224408#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 224409#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 224403#L898 assume 1 != cleanup_~tmp___0~1#1; 224404#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 223557#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 223558#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 223508#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 223510#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 224766#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 224754#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224715#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 224716#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 224696#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 224697#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 224683#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 224684#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224717#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 224710#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 224689#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 224682#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 224679#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 224671#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 224660#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 220214#L2164-3 assume !(1 == ~doorState~0); 220215#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224899#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 224900#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 224834#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 224923#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 224828#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 224920#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224911#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 224853#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 224832#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 224829#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 224824#L1892-5 assume !(1 == ~currentHeading~0); 224818#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 224813#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 224810#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 224807#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 224806#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 224805#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 224804#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 224803#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 224798#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 224789#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 224768#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 224420#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 224421#L890-2 [2024-11-20 22:45:10,377 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:10,377 INFO L85 PathProgramCache]: Analyzing trace with hash 939081110, now seen corresponding path program 1 times [2024-11-20 22:45:10,378 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:10,378 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529351178] [2024-11-20 22:45:10,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:10,378 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:10,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:10,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:10,472 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:10,472 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529351178] [2024-11-20 22:45:10,473 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [529351178] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:10,473 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:10,473 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:10,474 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1732139015] [2024-11-20 22:45:10,475 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:10,475 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:10,475 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:10,476 INFO L85 PathProgramCache]: Analyzing trace with hash -1716848656, now seen corresponding path program 1 times [2024-11-20 22:45:10,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:10,476 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1778947354] [2024-11-20 22:45:10,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:10,476 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:10,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:10,624 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-20 22:45:10,624 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:10,624 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1778947354] [2024-11-20 22:45:10,625 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1778947354] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:10,625 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:10,625 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:10,625 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1594221906] [2024-11-20 22:45:10,625 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:10,626 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:10,626 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:10,626 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:45:10,627 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:45:10,627 INFO L87 Difference]: Start difference. First operand 15867 states and 29119 transitions. cyclomatic complexity: 13253 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:10,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:10,723 INFO L93 Difference]: Finished difference Result 15867 states and 29113 transitions. [2024-11-20 22:45:10,723 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15867 states and 29113 transitions. [2024-11-20 22:45:10,813 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:10,860 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15867 states to 15867 states and 29113 transitions. [2024-11-20 22:45:10,860 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15867 [2024-11-20 22:45:10,876 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15867 [2024-11-20 22:45:10,876 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15867 states and 29113 transitions. [2024-11-20 22:45:10,893 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:10,893 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15867 states and 29113 transitions. [2024-11-20 22:45:10,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15867 states and 29113 transitions. [2024-11-20 22:45:11,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15867 to 15867. [2024-11-20 22:45:11,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15867 states, 15867 states have (on average 1.8348143946555744) internal successors, (29113), 15866 states have internal predecessors, (29113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:11,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15867 states to 15867 states and 29113 transitions. [2024-11-20 22:45:11,094 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15867 states and 29113 transitions. [2024-11-20 22:45:11,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:45:11,095 INFO L425 stractBuchiCegarLoop]: Abstraction has 15867 states and 29113 transitions. [2024-11-20 22:45:11,095 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-20 22:45:11,095 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15867 states and 29113 transitions. [2024-11-20 22:45:11,142 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:11,143 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:11,143 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:11,146 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:11,146 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:11,147 INFO L745 eck$LassoCheckResult]: Stem: 251325#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 251326#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 252361#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 251873#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 251874#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 251871#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 251872#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 251186#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 251187#L104 assume !(0 == getOrigin_~person#1); 252668#L108 assume !(1 == getOrigin_~person#1); 251359#L112 assume !(2 == getOrigin_~person#1); 251360#L116 assume !(3 == getOrigin_~person#1); 252822#L120 assume !(4 == getOrigin_~person#1); 252581#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 251346#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 251347#L3009 assume 0 == initPersonOnFloor_~floor#1; 252495#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 251400#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 252737#L2801 assume !(0 == callOnFloor_~floorID#1); 253073#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 251844#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 253309#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 253308#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253307#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 253306#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 253305#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 253191#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 252469#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 251369#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 251371#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 253304#L2073 assume !(0 != timeShift_~tmp___9~2#1); 251651#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 251652#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 251005#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 251006#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 251689#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 252476#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 252390#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 252392#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 253310#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 253311#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 257510#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 250985#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 250986#L1892-2 assume !(1 == ~currentHeading~0); 252271#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 252272#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 252661#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 252706#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 252707#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 252389#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 252100#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 251950#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 253335#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 253333#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 252614#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 252615#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 253327#L890-2 [2024-11-20 22:45:11,147 INFO L747 eck$LassoCheckResult]: Loop: 253327#L890-2 assume !false; 253326#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 253325#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 253324#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 253323#L898 assume 1 != cleanup_~tmp___0~1#1; 253322#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253321#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 253320#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 253318#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 253315#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253317#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 265200#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 265198#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 265112#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 265104#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 265103#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 265102#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 265101#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 265100#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 265096#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 265095#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 265094#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 265090#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 265084#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 265080#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 265078#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 265075#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 265073#L2164-3 assume !(1 == ~doorState~0); 255511#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 265070#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 265071#L1685-2 assume !(0 == ~currentFloorID~0); 265093#L1691-2 assume ~currentFloorID~0 > 0; 265091#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 265092#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 265255#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 264973#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 264952#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 264948#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 264945#L1892-3 assume !(1 == ~currentHeading~0); 264943#L1902-9 assume !(0 == ~currentFloorID~0); 264939#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 264936#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 264934#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 264933#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 264931#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 264928#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 264645#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 264650#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 264648#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 264642#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 264640#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 264638#L890-2 assume !false; 264636#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 264634#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 264632#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 264630#L898 assume 1 != cleanup_~tmp___0~1#1; 264628#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 264626#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 264623#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 264622#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 264621#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253164#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 253165#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 252610#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 252178#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 251646#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 265290#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 265260#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 265251#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 265252#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 265585#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 265586#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 265589#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 265587#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 265584#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 265577#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 265576#L2164-3 assume !(1 == ~doorState~0); 257581#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 265575#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 265571#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 265499#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 265568#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 265493#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 265564#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 265562#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 265518#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 265497#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 265494#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 265489#L1892-5 assume !(1 == ~currentHeading~0); 265483#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 265478#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 265475#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 265472#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 265400#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 265398#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 265373#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 265352#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 265357#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 265355#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 265314#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 253328#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 253327#L890-2 [2024-11-20 22:45:11,148 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:11,148 INFO L85 PathProgramCache]: Analyzing trace with hash 1568280421, now seen corresponding path program 1 times [2024-11-20 22:45:11,148 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:11,148 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286521085] [2024-11-20 22:45:11,148 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:11,148 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:11,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:11,300 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:11,300 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:11,300 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286521085] [2024-11-20 22:45:11,300 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1286521085] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:11,300 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:11,301 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-20 22:45:11,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [970685605] [2024-11-20 22:45:11,301 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:11,301 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:11,301 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:11,301 INFO L85 PathProgramCache]: Analyzing trace with hash -717798668, now seen corresponding path program 1 times [2024-11-20 22:45:11,302 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:11,302 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2114644628] [2024-11-20 22:45:11,302 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:11,302 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:11,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:11,400 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-20 22:45:11,400 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:11,400 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2114644628] [2024-11-20 22:45:11,400 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2114644628] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:11,400 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:11,401 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:11,401 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247712469] [2024-11-20 22:45:11,401 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:11,401 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:11,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:11,402 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-20 22:45:11,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-20 22:45:11,402 INFO L87 Difference]: Start difference. First operand 15867 states and 29113 transitions. cyclomatic complexity: 13247 Second operand has 6 states, 6 states have (on average 9.333333333333334) internal successors, (56), 6 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:11,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:11,515 INFO L93 Difference]: Finished difference Result 15861 states and 29100 transitions. [2024-11-20 22:45:11,515 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15861 states and 29100 transitions. [2024-11-20 22:45:11,589 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:11,761 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15861 states to 15861 states and 29100 transitions. [2024-11-20 22:45:11,762 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15861 [2024-11-20 22:45:11,774 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15861 [2024-11-20 22:45:11,774 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15861 states and 29100 transitions. [2024-11-20 22:45:11,785 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:11,786 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29100 transitions. [2024-11-20 22:45:11,794 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15861 states and 29100 transitions. [2024-11-20 22:45:11,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15861 to 15861. [2024-11-20 22:45:11,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15861 states, 15861 states have (on average 1.8346888594666162) internal successors, (29100), 15860 states have internal predecessors, (29100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:11,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15861 states to 15861 states and 29100 transitions. [2024-11-20 22:45:11,979 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29100 transitions. [2024-11-20 22:45:11,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-20 22:45:11,980 INFO L425 stractBuchiCegarLoop]: Abstraction has 15861 states and 29100 transitions. [2024-11-20 22:45:11,980 INFO L332 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-11-20 22:45:11,980 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15861 states and 29100 transitions. [2024-11-20 22:45:12,027 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:12,027 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:12,028 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:12,031 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:12,031 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:12,032 INFO L745 eck$LassoCheckResult]: Stem: 283069#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 283070#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 284116#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 283616#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 283617#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 283618#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 283619#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 282930#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 282931#L104 assume !(0 == getOrigin_~person#1); 284426#L108 assume !(1 == getOrigin_~person#1); 283104#L112 assume !(2 == getOrigin_~person#1); 283105#L116 assume !(3 == getOrigin_~person#1); 284587#L120 assume !(4 == getOrigin_~person#1); 284340#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 283090#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 283091#L3009 assume !(0 == initPersonOnFloor_~floor#1); 284015#L3036 assume 1 == initPersonOnFloor_~floor#1; 284016#L3037 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 283145#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 284498#L2801 assume !(0 == callOnFloor_~floorID#1); 284852#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 283588#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 285095#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 285094#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 285093#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 285092#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 285091#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 284966#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 284224#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 283114#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 283116#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 285089#L2073 assume !(0 != timeShift_~tmp___9~2#1); 283395#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 283396#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 282748#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 282749#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 283433#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 289914#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 285096#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 289913#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 289912#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 284010#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 282829#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 282727#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 282728#L1892-2 assume !(1 == ~currentHeading~0); 284024#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 284025#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 284419#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 284463#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 284464#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 284148#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 283846#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 283693#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 284995#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 285120#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 284372#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 284373#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 285115#L890-2 [2024-11-20 22:45:12,033 INFO L747 eck$LassoCheckResult]: Loop: 285115#L890-2 assume !false; 296299#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 285110#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 285109#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 285108#L898 assume 1 != cleanup_~tmp___0~1#1; 285107#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 285106#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 285105#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 285103#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 285101#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 284933#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 284934#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 284370#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 283925#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 283388#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 296956#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 296955#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296954#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 296953#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296949#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 296947#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 296948#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 296725#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 296719#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 296718#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 296716#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 296715#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 296712#L2164-3 assume !(1 == ~doorState~0); 287279#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 296709#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 296708#L1685-2 assume !(0 == ~currentFloorID~0); 296707#L1691-2 assume ~currentFloorID~0 > 0; 296705#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296706#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296760#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 296549#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 296529#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 296526#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 296487#L1892-3 assume !(1 == ~currentHeading~0); 296480#L1902-9 assume !(0 == ~currentFloorID~0); 296476#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 296473#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 296471#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 296469#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 296466#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 296461#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 296436#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 296441#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 296439#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 296403#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 296404#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 285113#L890-2 assume !false; 285111#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 285112#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 296250#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 296249#L898 assume 1 != cleanup_~tmp___0~1#1; 296248#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296247#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296246#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 296240#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 296237#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296236#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 296228#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296226#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 296223#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 296215#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 296214#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 296213#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296211#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296210#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 296205#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 296206#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 296209#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 296207#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 296208#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 296637#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 296635#L2164-3 assume !(1 == ~doorState~0); 289767#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 296633#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 296634#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 296600#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 296749#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 296597#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 296747#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 296745#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 296679#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 296673#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 296669#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 296670#L1892-5 assume !(1 == ~currentHeading~0); 296961#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 296946#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 296586#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 296579#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 296577#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 296576#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 296575#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 296445#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 296450#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 296448#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 296431#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 285114#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 285115#L890-2 [2024-11-20 22:45:12,033 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:12,034 INFO L85 PathProgramCache]: Analyzing trace with hash 1506540322, now seen corresponding path program 1 times [2024-11-20 22:45:12,034 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:12,034 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [334486377] [2024-11-20 22:45:12,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:12,034 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:12,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:12,124 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:12,124 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:12,124 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [334486377] [2024-11-20 22:45:12,124 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [334486377] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:12,124 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:12,125 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:45:12,125 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [503794148] [2024-11-20 22:45:12,125 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:12,127 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:12,128 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:12,128 INFO L85 PathProgramCache]: Analyzing trace with hash -717798668, now seen corresponding path program 2 times [2024-11-20 22:45:12,128 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:12,128 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2003511871] [2024-11-20 22:45:12,128 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:12,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:12,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:12,243 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-20 22:45:12,243 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:12,244 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2003511871] [2024-11-20 22:45:12,244 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2003511871] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:12,244 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:12,244 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:12,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1975371255] [2024-11-20 22:45:12,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:12,244 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:12,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:12,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:45:12,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:45:12,245 INFO L87 Difference]: Start difference. First operand 15861 states and 29100 transitions. cyclomatic complexity: 13240 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:12,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:12,421 INFO L93 Difference]: Finished difference Result 15871 states and 29111 transitions. [2024-11-20 22:45:12,421 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15871 states and 29111 transitions. [2024-11-20 22:45:12,512 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:12,574 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15871 states to 15871 states and 29111 transitions. [2024-11-20 22:45:12,575 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15871 [2024-11-20 22:45:12,592 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15871 [2024-11-20 22:45:12,593 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15871 states and 29111 transitions. [2024-11-20 22:45:12,611 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:12,611 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15871 states and 29111 transitions. [2024-11-20 22:45:12,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15871 states and 29111 transitions. [2024-11-20 22:45:12,764 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15871 to 15861. [2024-11-20 22:45:12,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15861 states, 15861 states have (on average 1.8344366685580984) internal successors, (29096), 15860 states have internal predecessors, (29096), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:12,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15861 states to 15861 states and 29096 transitions. [2024-11-20 22:45:12,808 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29096 transitions. [2024-11-20 22:45:12,808 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:45:12,808 INFO L425 stractBuchiCegarLoop]: Abstraction has 15861 states and 29096 transitions. [2024-11-20 22:45:12,809 INFO L332 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-11-20 22:45:12,809 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15861 states and 29096 transitions. [2024-11-20 22:45:12,859 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:12,859 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:12,859 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:12,863 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:12,863 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:12,863 INFO L745 eck$LassoCheckResult]: Stem: 314812#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 314813#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 315844#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 315349#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 315350#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 315351#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 315352#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 314674#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 314675#L104 assume !(0 == getOrigin_~person#1); 316155#L108 assume !(1 == getOrigin_~person#1); 314846#L112 assume !(2 == getOrigin_~person#1); 314847#L116 assume !(3 == getOrigin_~person#1); 316310#L120 assume !(4 == getOrigin_~person#1); 316065#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 314833#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 314834#L3009 assume !(0 == initPersonOnFloor_~floor#1); 315744#L3036 assume 1 == initPersonOnFloor_~floor#1; 315745#L3037 assume !(0 == initPersonOnFloor_~person#1); 316408#L3040 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 314887#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 316225#L2801 assume !(0 == callOnFloor_~floorID#1); 316554#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 315322#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 315509#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 316763#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 316762#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 316761#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 316760#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 316661#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 315950#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 314856#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 314858#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 316759#L2073 assume !(0 != timeShift_~tmp___9~2#1); 315133#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 315134#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 320987#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 316595#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 315776#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 315957#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 315876#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 315878#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 316248#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 315739#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 314573#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 314471#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 314472#L1892-2 assume !(1 == ~currentHeading~0); 315753#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 315754#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 316146#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 316193#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 316194#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 315874#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 315875#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 316789#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 316793#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 316792#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 316098#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 316099#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 316786#L890-2 [2024-11-20 22:45:12,864 INFO L747 eck$LassoCheckResult]: Loop: 316786#L890-2 assume !false; 316781#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 316782#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 316778#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 316777#L898 assume 1 != cleanup_~tmp___0~1#1; 316776#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 316775#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 316774#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 316772#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 316770#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 316636#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 316637#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 316096#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 315655#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 315128#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 328731#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 328730#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328380#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 328194#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328189#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 328185#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 328186#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 328198#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 328190#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 328187#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 328188#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 328415#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 328412#L2164-3 assume !(1 == ~doorState~0); 318994#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 328405#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 328406#L1685-2 assume !(0 == ~currentFloorID~0); 328476#L1691-2 assume ~currentFloorID~0 > 0; 328474#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328475#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328482#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 328360#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 328338#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 328336#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 328334#L1892-3 assume !(1 == ~currentHeading~0); 328333#L1902-9 assume !(0 == ~currentFloorID~0); 328331#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 328265#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 328260#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 328258#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 328256#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 328184#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 328183#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 328172#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 328173#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 328160#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 328161#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 316783#L890-2 assume !false; 316784#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 316779#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 316780#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 328725#L898 assume 1 != cleanup_~tmp___0~1#1; 328724#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328723#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328722#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 328721#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 328720#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328719#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 328707#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328705#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 328646#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 328638#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 328636#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 328635#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328631#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328630#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 328628#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 328627#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 328624#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 328623#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 328621#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 328620#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 328617#L2164-3 assume !(1 == ~doorState~0); 321055#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 328616#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 328612#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 328581#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 328610#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 328571#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 328607#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 328575#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 328549#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 328322#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 328282#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 328283#L1892-5 assume !(1 == ~currentHeading~0); 328326#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 328324#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 328263#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 328259#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 328257#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 328253#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 328254#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 328741#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 328740#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 328162#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 328163#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 316785#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 316786#L890-2 [2024-11-20 22:45:12,864 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:12,865 INFO L85 PathProgramCache]: Analyzing trace with hash -1612960446, now seen corresponding path program 1 times [2024-11-20 22:45:12,865 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:12,865 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605685491] [2024-11-20 22:45:12,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:12,865 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:12,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:13,037 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:13,037 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:13,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605685491] [2024-11-20 22:45:13,037 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605685491] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:13,037 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:13,038 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:45:13,038 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [829337177] [2024-11-20 22:45:13,038 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:13,038 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:13,038 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:13,039 INFO L85 PathProgramCache]: Analyzing trace with hash -1716848656, now seen corresponding path program 2 times [2024-11-20 22:45:13,039 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:13,039 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1050168707] [2024-11-20 22:45:13,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:13,039 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:13,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:13,126 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-20 22:45:13,127 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:13,127 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1050168707] [2024-11-20 22:45:13,127 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1050168707] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:13,127 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:13,127 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:13,127 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1767162047] [2024-11-20 22:45:13,127 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:13,128 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:13,128 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:13,128 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:45:13,128 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:45:13,129 INFO L87 Difference]: Start difference. First operand 15861 states and 29096 transitions. cyclomatic complexity: 13236 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:13,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:13,271 INFO L93 Difference]: Finished difference Result 15871 states and 29107 transitions. [2024-11-20 22:45:13,271 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15871 states and 29107 transitions. [2024-11-20 22:45:13,349 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:13,400 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15871 states to 15871 states and 29107 transitions. [2024-11-20 22:45:13,401 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15871 [2024-11-20 22:45:13,416 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15871 [2024-11-20 22:45:13,417 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15871 states and 29107 transitions. [2024-11-20 22:45:13,431 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:13,431 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15871 states and 29107 transitions. [2024-11-20 22:45:13,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15871 states and 29107 transitions. [2024-11-20 22:45:13,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15871 to 15861. [2024-11-20 22:45:13,577 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15861 states, 15861 states have (on average 1.8341844776495808) internal successors, (29092), 15860 states have internal predecessors, (29092), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:13,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15861 states to 15861 states and 29092 transitions. [2024-11-20 22:45:13,749 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29092 transitions. [2024-11-20 22:45:13,749 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:45:13,749 INFO L425 stractBuchiCegarLoop]: Abstraction has 15861 states and 29092 transitions. [2024-11-20 22:45:13,749 INFO L332 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-11-20 22:45:13,749 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15861 states and 29092 transitions. [2024-11-20 22:45:13,790 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:13,791 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:13,791 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:13,794 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:13,794 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:13,794 INFO L745 eck$LassoCheckResult]: Stem: 346556#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 346557#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 347588#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 347093#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 347094#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 347095#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 347096#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 346418#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 346419#L104 assume !(0 == getOrigin_~person#1); 347899#L108 assume !(1 == getOrigin_~person#1); 346590#L112 assume !(2 == getOrigin_~person#1); 346591#L116 assume !(3 == getOrigin_~person#1); 348054#L120 assume !(4 == getOrigin_~person#1); 347809#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 346577#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 346578#L3009 assume !(0 == initPersonOnFloor_~floor#1); 347488#L3036 assume 1 == initPersonOnFloor_~floor#1; 347489#L3037 assume !(0 == initPersonOnFloor_~person#1); 348152#L3040 assume !(1 == initPersonOnFloor_~person#1); 346791#L3043 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 346631#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 347969#L2801 assume !(0 == callOnFloor_~floorID#1); 348298#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 347066#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 347253#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 348507#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 348506#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 348505#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 348504#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 348405#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 347694#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 346600#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 346602#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 348503#L2073 assume !(0 != timeShift_~tmp___9~2#1); 346877#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 346878#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 352731#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 348339#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 347520#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 347701#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 347620#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 347622#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 347992#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 347483#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 346317#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 346215#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 346216#L1892-2 assume !(1 == ~currentHeading~0); 347497#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 347498#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 347890#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 347937#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 347938#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 347618#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 347619#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 348533#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 348537#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 348536#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 347842#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 347843#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 348530#L890-2 [2024-11-20 22:45:13,794 INFO L747 eck$LassoCheckResult]: Loop: 348530#L890-2 assume !false; 348525#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 348526#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 348522#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 348521#L898 assume 1 != cleanup_~tmp___0~1#1; 348520#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 348519#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 348518#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 348516#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 348514#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 348380#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 348381#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 347840#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 347399#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 346872#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 360475#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 360474#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360124#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 359938#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 359933#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 359929#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 359930#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 359942#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 359934#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 359931#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 359932#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 360159#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 360156#L2164-3 assume !(1 == ~doorState~0); 350738#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 360149#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 360150#L1685-2 assume !(0 == ~currentFloorID~0); 360220#L1691-2 assume ~currentFloorID~0 > 0; 360218#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360219#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 360226#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 360104#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 360082#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 360080#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 360078#L1892-3 assume !(1 == ~currentHeading~0); 360077#L1902-9 assume !(0 == ~currentFloorID~0); 360075#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 360009#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 360004#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 360002#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 360000#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 359928#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 359927#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 359916#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 359917#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 359904#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 359905#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 348527#L890-2 assume !false; 348528#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 348523#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 348524#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 360469#L898 assume 1 != cleanup_~tmp___0~1#1; 360468#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360467#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 360466#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 360465#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 360464#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360463#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 360451#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 360449#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 360390#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 360382#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 360380#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 360379#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360375#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 360374#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 360372#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 360371#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 360368#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 360367#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 360365#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 360364#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 360361#L2164-3 assume !(1 == ~doorState~0); 352799#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 360360#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 360356#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 360325#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 360354#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 360315#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 360351#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 360319#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 360293#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 360066#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 360026#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 360027#L1892-5 assume !(1 == ~currentHeading~0); 360070#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 360068#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 360007#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 360003#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 360001#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 359997#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 359998#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 360485#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 360484#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 359906#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 359907#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 348529#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 348530#L890-2 [2024-11-20 22:45:13,795 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:13,795 INFO L85 PathProgramCache]: Analyzing trace with hash -815271043, now seen corresponding path program 1 times [2024-11-20 22:45:13,795 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:13,796 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786081704] [2024-11-20 22:45:13,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:13,796 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:13,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:13,867 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:13,868 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:13,868 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786081704] [2024-11-20 22:45:13,868 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786081704] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:13,868 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:13,869 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:45:13,869 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1342174321] [2024-11-20 22:45:13,869 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:13,870 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:13,870 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:13,870 INFO L85 PathProgramCache]: Analyzing trace with hash -1716848656, now seen corresponding path program 3 times [2024-11-20 22:45:13,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:13,870 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [426780490] [2024-11-20 22:45:13,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:13,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:13,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:13,961 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-20 22:45:13,961 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:13,961 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [426780490] [2024-11-20 22:45:13,961 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [426780490] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:13,961 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:13,962 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:13,962 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [504617200] [2024-11-20 22:45:13,962 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:13,962 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:13,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:13,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:45:13,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:45:13,963 INFO L87 Difference]: Start difference. First operand 15861 states and 29092 transitions. cyclomatic complexity: 13232 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:14,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:14,209 INFO L93 Difference]: Finished difference Result 15871 states and 29103 transitions. [2024-11-20 22:45:14,209 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15871 states and 29103 transitions. [2024-11-20 22:45:14,276 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:14,324 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15871 states to 15871 states and 29103 transitions. [2024-11-20 22:45:14,325 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15871 [2024-11-20 22:45:14,338 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15871 [2024-11-20 22:45:14,339 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15871 states and 29103 transitions. [2024-11-20 22:45:14,351 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:14,352 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15871 states and 29103 transitions. [2024-11-20 22:45:14,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15871 states and 29103 transitions. [2024-11-20 22:45:14,484 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15871 to 15861. [2024-11-20 22:45:14,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15861 states, 15861 states have (on average 1.833932286741063) internal successors, (29088), 15860 states have internal predecessors, (29088), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:14,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15861 states to 15861 states and 29088 transitions. [2024-11-20 22:45:14,522 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29088 transitions. [2024-11-20 22:45:14,522 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:45:14,523 INFO L425 stractBuchiCegarLoop]: Abstraction has 15861 states and 29088 transitions. [2024-11-20 22:45:14,523 INFO L332 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2024-11-20 22:45:14,523 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15861 states and 29088 transitions. [2024-11-20 22:45:14,557 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:14,557 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:14,557 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:14,648 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:14,648 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:14,649 INFO L745 eck$LassoCheckResult]: Stem: 378300#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 378301#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 379332#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 378837#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 378838#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 378839#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 378840#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 378162#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 378163#L104 assume !(0 == getOrigin_~person#1); 379643#L108 assume !(1 == getOrigin_~person#1); 378334#L112 assume !(2 == getOrigin_~person#1); 378335#L116 assume !(3 == getOrigin_~person#1); 379798#L120 assume !(4 == getOrigin_~person#1); 379553#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 378321#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 378322#L3009 assume !(0 == initPersonOnFloor_~floor#1); 379232#L3036 assume !(1 == initPersonOnFloor_~floor#1); 378850#L3063 assume !(2 == initPersonOnFloor_~floor#1); 378471#L3090 assume !(3 == initPersonOnFloor_~floor#1); 378473#L3117 assume !(4 == initPersonOnFloor_~floor#1); 378375#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 379713#L2801 assume !(0 == callOnFloor_~floorID#1); 380042#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 378810#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 378997#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 380251#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 380250#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 380249#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 380248#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 380149#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 379438#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 378344#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 378346#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 380247#L2073 assume !(0 != timeShift_~tmp___9~2#1); 378621#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 378622#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 384475#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 380083#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 379264#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 379445#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 379364#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 379366#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 379736#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 379227#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 378061#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 377959#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 377960#L1892-2 assume !(1 == ~currentHeading~0); 379241#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 379242#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 379634#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 379681#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 379682#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 379362#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 379363#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 380277#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 380281#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 380280#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 379586#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 379587#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 380274#L890-2 [2024-11-20 22:45:14,650 INFO L747 eck$LassoCheckResult]: Loop: 380274#L890-2 assume !false; 380269#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 380270#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 380266#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 380265#L898 assume 1 != cleanup_~tmp___0~1#1; 380264#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 380263#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 380262#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 380260#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 380258#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 380124#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 380125#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 379584#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 379143#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 378616#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 392219#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 392218#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 391868#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 391682#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 391677#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 391673#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 391674#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 391686#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 391678#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 391675#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 391676#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 391903#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 391900#L2164-3 assume !(1 == ~doorState~0); 382482#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 391893#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 391894#L1685-2 assume !(0 == ~currentFloorID~0); 391964#L1691-2 assume ~currentFloorID~0 > 0; 391962#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 391963#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 391970#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 391848#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 391826#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 391824#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 391822#L1892-3 assume !(1 == ~currentHeading~0); 391821#L1902-9 assume !(0 == ~currentFloorID~0); 391819#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 391753#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 391748#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 391746#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 391744#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 391672#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 391671#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 391660#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 391661#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 391648#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 391649#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 380271#L890-2 assume !false; 380272#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 380267#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 380268#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 392213#L898 assume 1 != cleanup_~tmp___0~1#1; 392212#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 392211#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 392210#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 392209#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 392208#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 392207#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 392195#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 392193#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 392134#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 392126#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 392124#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 392123#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 392119#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 392118#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 392116#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 392115#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 392112#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 392111#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 392109#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 392108#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 392105#L2164-3 assume !(1 == ~doorState~0); 384543#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 392104#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 392100#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 392069#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 392098#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 392059#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 392095#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 392063#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 392037#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 391810#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 391770#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 391771#L1892-5 assume !(1 == ~currentHeading~0); 391814#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 391812#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 391751#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 391747#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 391745#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 391741#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 391742#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 392229#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 392228#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 391650#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 391651#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 380273#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 380274#L890-2 [2024-11-20 22:45:14,651 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:14,651 INFO L85 PathProgramCache]: Analyzing trace with hash -192092419, now seen corresponding path program 1 times [2024-11-20 22:45:14,651 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:14,651 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1640663383] [2024-11-20 22:45:14,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:14,651 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:14,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:14,743 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:14,744 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:14,744 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1640663383] [2024-11-20 22:45:14,744 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1640663383] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:14,744 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:14,744 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:45:14,744 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1221515269] [2024-11-20 22:45:14,745 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:14,745 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:14,745 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:14,745 INFO L85 PathProgramCache]: Analyzing trace with hash -1716848656, now seen corresponding path program 4 times [2024-11-20 22:45:14,746 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:14,746 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [124369239] [2024-11-20 22:45:14,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:14,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:14,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:14,851 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-20 22:45:14,852 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:14,852 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [124369239] [2024-11-20 22:45:14,852 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [124369239] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:14,853 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:14,853 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:14,853 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1293287477] [2024-11-20 22:45:14,853 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:14,853 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:14,854 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:14,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:45:14,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:45:14,854 INFO L87 Difference]: Start difference. First operand 15861 states and 29088 transitions. cyclomatic complexity: 13228 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:14,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:14,954 INFO L93 Difference]: Finished difference Result 15840 states and 29054 transitions. [2024-11-20 22:45:14,955 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15840 states and 29054 transitions. [2024-11-20 22:45:15,047 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:15,104 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15840 states to 15840 states and 29054 transitions. [2024-11-20 22:45:15,104 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15840 [2024-11-20 22:45:15,122 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15840 [2024-11-20 22:45:15,122 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15840 states and 29054 transitions. [2024-11-20 22:45:15,139 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:15,140 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29054 transitions. [2024-11-20 22:45:15,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15840 states and 29054 transitions. [2024-11-20 22:45:15,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15840 to 15840. [2024-11-20 22:45:15,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15840 states, 15840 states have (on average 1.8342171717171718) internal successors, (29054), 15839 states have internal predecessors, (29054), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:15,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15840 states to 15840 states and 29054 transitions. [2024-11-20 22:45:15,473 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29054 transitions. [2024-11-20 22:45:15,474 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:45:15,474 INFO L425 stractBuchiCegarLoop]: Abstraction has 15840 states and 29054 transitions. [2024-11-20 22:45:15,474 INFO L332 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2024-11-20 22:45:15,474 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15840 states and 29054 transitions. [2024-11-20 22:45:15,510 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:15,510 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:15,510 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:15,513 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:15,514 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:15,514 INFO L745 eck$LassoCheckResult]: Stem: 410012#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 410013#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 411032#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 410551#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 410552#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 410553#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 410554#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 409874#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 409875#L104 assume !(0 == getOrigin_~person#1); 411334#L108 assume !(1 == getOrigin_~person#1); 410047#L112 assume !(2 == getOrigin_~person#1); 410048#L116 assume !(3 == getOrigin_~person#1); 411485#L120 assume !(4 == getOrigin_~person#1); 411247#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 410033#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 410034#L3009 assume !(0 == initPersonOnFloor_~floor#1); 410934#L3036 assume 1 == initPersonOnFloor_~floor#1; 410935#L3037 assume !(0 == initPersonOnFloor_~person#1); 411591#L3040 assume !(1 == initPersonOnFloor_~person#1); 410246#L3043 assume !(2 == initPersonOnFloor_~person#1); 410247#L3046 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 410088#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 411401#L2801 assume !(0 == callOnFloor_~floorID#1); 411742#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 410524#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 411974#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 411973#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 411972#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 411971#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 411970#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 411848#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 411138#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 410057#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 410059#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 411969#L2073 assume !(0 != timeShift_~tmp___9~2#1); 410333#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 410334#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 416984#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 411780#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 410370#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 411146#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 411064#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 411066#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 411975#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 411976#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 416877#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 416875#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 416876#L1892-2 assume !(1 == ~currentHeading~0); 410943#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 410944#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 411328#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 411372#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 411373#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 411062#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 411063#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 410320#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 410321#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 412002#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 411279#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 411280#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 411997#L890-2 [2024-11-20 22:45:15,514 INFO L747 eck$LassoCheckResult]: Loop: 411997#L890-2 assume !false; 423318#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 423316#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 423314#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 411990#L898 assume 1 != cleanup_~tmp___0~1#1; 411989#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 411988#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 411986#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 411987#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 411981#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 411822#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 411823#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423035#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 410849#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 410328#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 423299#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 423297#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423295#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 423289#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423276#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 423270#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 423271#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 423293#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 423277#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 423272#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 423273#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 423676#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 423675#L2164-3 assume !(1 == ~doorState~0); 414191#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 423671#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 423670#L1685-2 assume !(0 == ~currentFloorID~0); 423669#L1691-2 assume ~currentFloorID~0 > 0; 423667#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423668#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423710#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 423571#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 423549#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 423547#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 423545#L1892-3 assume !(1 == ~currentHeading~0); 423402#L1902-9 assume !(0 == ~currentFloorID~0); 423395#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 423387#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 423379#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 423372#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 423367#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 423361#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 423334#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 423339#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 423337#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 423323#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 423321#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 411995#L890-2 assume !false; 411994#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 411993#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 411991#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 411992#L898 assume 1 != cleanup_~tmp___0~1#1; 423311#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423309#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423307#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 411983#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 411985#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423302#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 411954#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 411277#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 411650#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 423015#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 423014#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 423013#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423011#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423010#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 423006#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 423007#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 423009#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 423008#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 423004#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 423005#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 424209#L2164-3 assume !(1 == ~doorState~0); 417133#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 424200#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 424197#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 424113#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 424195#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 424107#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 424192#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 424184#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 424132#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 424111#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 424108#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 424103#L1892-5 assume !(1 == ~currentHeading~0); 424097#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 424092#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 424089#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 424086#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 424085#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 424084#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 424083#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 424069#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 424074#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 424072#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 424067#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 411996#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 411997#L890-2 [2024-11-20 22:45:15,515 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:15,515 INFO L85 PathProgramCache]: Analyzing trace with hash 1156229373, now seen corresponding path program 1 times [2024-11-20 22:45:15,515 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:15,515 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376685966] [2024-11-20 22:45:15,515 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:15,515 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:15,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:15,576 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:15,577 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:15,577 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376685966] [2024-11-20 22:45:15,577 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376685966] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:15,577 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:15,577 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:45:15,577 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1389232232] [2024-11-20 22:45:15,578 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:15,578 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:15,578 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:15,578 INFO L85 PathProgramCache]: Analyzing trace with hash -717798668, now seen corresponding path program 3 times [2024-11-20 22:45:15,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:15,578 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2143353045] [2024-11-20 22:45:15,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:15,579 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:15,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:15,659 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-20 22:45:15,659 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:15,659 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2143353045] [2024-11-20 22:45:15,659 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2143353045] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:15,659 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:15,659 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:15,660 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2014644797] [2024-11-20 22:45:15,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:15,660 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:15,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:15,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:45:15,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:45:15,661 INFO L87 Difference]: Start difference. First operand 15840 states and 29054 transitions. cyclomatic complexity: 13215 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:15,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:15,755 INFO L93 Difference]: Finished difference Result 15840 states and 29053 transitions. [2024-11-20 22:45:15,755 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15840 states and 29053 transitions. [2024-11-20 22:45:15,811 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:15,846 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15840 states to 15840 states and 29053 transitions. [2024-11-20 22:45:15,846 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15840 [2024-11-20 22:45:15,857 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15840 [2024-11-20 22:45:15,857 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15840 states and 29053 transitions. [2024-11-20 22:45:15,867 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:15,868 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29053 transitions. [2024-11-20 22:45:15,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15840 states and 29053 transitions. [2024-11-20 22:45:16,259 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15840 to 15840. [2024-11-20 22:45:16,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15840 states, 15840 states have (on average 1.8341540404040404) internal successors, (29053), 15839 states have internal predecessors, (29053), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:16,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15840 states to 15840 states and 29053 transitions. [2024-11-20 22:45:16,304 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29053 transitions. [2024-11-20 22:45:16,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:45:16,305 INFO L425 stractBuchiCegarLoop]: Abstraction has 15840 states and 29053 transitions. [2024-11-20 22:45:16,305 INFO L332 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2024-11-20 22:45:16,305 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15840 states and 29053 transitions. [2024-11-20 22:45:16,350 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:16,350 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:16,350 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:16,354 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:16,354 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:16,354 INFO L745 eck$LassoCheckResult]: Stem: 441704#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 441705#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 442731#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 442249#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 442250#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 442247#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 442248#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 441565#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 441566#L104 assume !(0 == getOrigin_~person#1); 443038#L108 assume !(1 == getOrigin_~person#1); 441738#L112 assume !(2 == getOrigin_~person#1); 441739#L116 assume !(3 == getOrigin_~person#1); 443196#L120 assume !(4 == getOrigin_~person#1); 442948#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 441728#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 441729#L3009 assume !(0 == initPersonOnFloor_~floor#1); 442630#L3036 assume 1 == initPersonOnFloor_~floor#1; 442631#L3037 assume !(0 == initPersonOnFloor_~person#1); 443306#L3040 assume !(1 == initPersonOnFloor_~person#1); 441938#L3043 assume !(2 == initPersonOnFloor_~person#1); 441939#L3046 assume !(3 == initPersonOnFloor_~person#1); 443524#L3049 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 441779#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 443108#L2801 assume !(0 == callOnFloor_~floorID#1); 443455#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 442219#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 443688#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 443687#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 443686#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 443685#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 443684#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 443566#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 442838#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 441748#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 441750#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 443682#L2073 assume !(0 != timeShift_~tmp___9~2#1); 442024#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 442025#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 441387#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 441388#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 442061#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 447908#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 443691#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 447907#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 447906#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 442627#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 441465#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 441367#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 441368#L1892-2 assume !(1 == ~currentHeading~0); 443258#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 443031#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 443032#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 443076#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 443077#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 442758#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 442759#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 441544#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 443653#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 442282#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 441543#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 442979#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 443712#L890-2 [2024-11-20 22:45:16,354 INFO L747 eck$LassoCheckResult]: Loop: 443712#L890-2 assume !false; 455155#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 455154#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 455153#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 455152#L898 assume 1 != cleanup_~tmp___0~1#1; 455151#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 455150#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 455148#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 443700#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 443702#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 443538#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 443539#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 455130#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 442546#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 442018#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 455149#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 455143#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 455129#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 455113#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 455107#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 454688#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 454689#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 455117#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 455108#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 454690#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 454543#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 454544#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 454978#L2164-3 assume !(1 == ~doorState~0); 445684#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 454975#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 454976#L1685-2 assume !(0 == ~currentFloorID~0); 455045#L1691-2 assume ~currentFloorID~0 > 0; 455040#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 455038#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 455018#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 454955#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 454927#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 454912#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 454799#L1892-3 assume !(1 == ~currentHeading~0); 454719#L1902-9 assume !(0 == ~currentFloorID~0); 454711#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 454705#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 454697#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 454698#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 454699#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 454536#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 454534#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 454535#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 445518#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 445517#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 443713#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 443711#L890-2 assume !false; 443710#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 443709#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 443708#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 443707#L898 assume 1 != cleanup_~tmp___0~1#1; 443706#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 443705#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 443703#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 443704#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 443697#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 443699#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 443665#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 442977#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 443366#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 455106#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 454687#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 454686#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 454681#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 454674#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 454670#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 454671#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 454675#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 454672#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 454673#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 454968#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 454933#L2164-3 assume !(1 == ~doorState~0); 447576#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 454910#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 454911#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 454784#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 455079#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 454780#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 455077#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 455075#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 455023#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 455017#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 454913#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 454800#L1892-5 assume !(1 == ~currentHeading~0); 454720#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 454712#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 454703#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 454701#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 454696#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 454693#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 454694#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 455158#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 455163#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 455161#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 455157#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 455156#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 443712#L890-2 [2024-11-20 22:45:16,355 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:16,355 INFO L85 PathProgramCache]: Analyzing trace with hash 861165528, now seen corresponding path program 1 times [2024-11-20 22:45:16,355 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:16,355 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1993116253] [2024-11-20 22:45:16,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:16,355 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:16,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:16,434 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:16,436 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:16,436 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1993116253] [2024-11-20 22:45:16,436 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1993116253] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:16,436 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:16,436 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:45:16,436 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [69512333] [2024-11-20 22:45:16,436 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:16,437 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:16,437 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:16,437 INFO L85 PathProgramCache]: Analyzing trace with hash -1226721358, now seen corresponding path program 1 times [2024-11-20 22:45:16,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:16,437 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [477785315] [2024-11-20 22:45:16,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:16,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:16,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:16,518 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-20 22:45:16,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:16,519 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [477785315] [2024-11-20 22:45:16,519 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [477785315] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:16,519 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:16,519 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:16,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [180654809] [2024-11-20 22:45:16,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:16,520 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:16,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:16,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:45:16,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:45:16,520 INFO L87 Difference]: Start difference. First operand 15840 states and 29053 transitions. cyclomatic complexity: 13214 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:16,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:16,611 INFO L93 Difference]: Finished difference Result 15840 states and 29052 transitions. [2024-11-20 22:45:16,611 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15840 states and 29052 transitions. [2024-11-20 22:45:16,856 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:16,891 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15840 states to 15840 states and 29052 transitions. [2024-11-20 22:45:16,891 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15840 [2024-11-20 22:45:16,902 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15840 [2024-11-20 22:45:16,903 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15840 states and 29052 transitions. [2024-11-20 22:45:16,912 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:16,912 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29052 transitions. [2024-11-20 22:45:16,921 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15840 states and 29052 transitions. [2024-11-20 22:45:17,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15840 to 15840. [2024-11-20 22:45:17,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15840 states, 15840 states have (on average 1.834090909090909) internal successors, (29052), 15839 states have internal predecessors, (29052), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:17,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15840 states to 15840 states and 29052 transitions. [2024-11-20 22:45:17,055 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29052 transitions. [2024-11-20 22:45:17,055 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:45:17,055 INFO L425 stractBuchiCegarLoop]: Abstraction has 15840 states and 29052 transitions. [2024-11-20 22:45:17,056 INFO L332 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2024-11-20 22:45:17,056 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15840 states and 29052 transitions. [2024-11-20 22:45:17,095 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:17,095 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:17,095 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:17,098 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:17,098 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:17,098 INFO L745 eck$LassoCheckResult]: Stem: 473396#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 473397#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 474425#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 473939#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 473940#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 473941#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 473942#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 473258#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 473259#L104 assume !(0 == getOrigin_~person#1); 474733#L108 assume !(1 == getOrigin_~person#1); 473430#L112 assume !(2 == getOrigin_~person#1); 473431#L116 assume !(3 == getOrigin_~person#1); 474887#L120 assume !(4 == getOrigin_~person#1); 474644#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 473420#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 473421#L3009 assume !(0 == initPersonOnFloor_~floor#1); 474323#L3036 assume 1 == initPersonOnFloor_~floor#1; 474324#L3037 assume !(0 == initPersonOnFloor_~person#1); 474992#L3040 assume !(1 == initPersonOnFloor_~person#1); 473629#L3043 assume !(2 == initPersonOnFloor_~person#1); 473630#L3046 assume !(3 == initPersonOnFloor_~person#1); 475202#L3049 assume !(4 == initPersonOnFloor_~person#1); 473470#L3052 assume !(5 == initPersonOnFloor_~person#1); 473471#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 474803#L2801 assume !(0 == callOnFloor_~floorID#1); 475140#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 473910#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 474095#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 473746#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 473747#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 473229#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 473230#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 475244#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 474532#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 473440#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 473442#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 475364#L2073 assume !(0 != timeShift_~tmp___9~2#1); 473717#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 473718#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 480058#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 475179#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 475075#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 474539#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 474456#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 474458#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 475370#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 475371#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 480029#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 480028#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 474944#L1892-2 assume !(1 == ~currentHeading~0); 474946#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 474724#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 474725#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 474772#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 474773#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 474453#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 474158#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 473237#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 474536#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 473975#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 473236#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 474678#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 475393#L890-2 [2024-11-20 22:45:17,099 INFO L747 eck$LassoCheckResult]: Loop: 475393#L890-2 assume !false; 486367#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 486366#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 486365#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 486364#L898 assume 1 != cleanup_~tmp___0~1#1; 486363#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486277#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486278#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 475378#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 475380#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486360#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 486356#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486352#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 474236#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 473709#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 486576#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 486575#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486573#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 486558#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486553#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 486544#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 486545#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 486562#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 486554#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 486546#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 486290#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 486291#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 486851#L2164-3 assume !(1 == ~doorState~0); 477338#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 486728#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 486726#L1685-2 assume !(0 == ~currentFloorID~0); 486723#L1691-2 assume ~currentFloorID~0 > 0; 486722#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486720#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486719#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 486631#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 486610#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 486606#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 486602#L1892-3 assume !(1 == ~currentHeading~0); 486596#L1902-9 assume !(0 == ~currentFloorID~0); 486591#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 486588#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 486586#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 486585#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 486583#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 486579#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 477199#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 477204#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 477202#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 477198#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 475392#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 475391#L890-2 assume !false; 475390#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 475388#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 475389#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 486532#L898 assume 1 != cleanup_~tmp___0~1#1; 486281#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486282#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 475381#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 475382#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 475376#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 475217#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 475218#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 474676#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 475055#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 486337#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 486336#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 486335#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486333#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486334#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 486513#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 486514#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 486516#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 486515#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 486288#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 486289#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 486488#L2164-3 assume !(1 == ~doorState~0); 480089#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 486485#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 486486#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 486415#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 486531#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 486409#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 486528#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 486498#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 486434#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 486413#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 486410#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 486405#L1892-5 assume !(1 == ~currentHeading~0); 486399#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 486394#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 486391#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 486388#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 486387#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 486386#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 486385#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 486371#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 486376#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 486374#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 486369#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 486368#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 475393#L890-2 [2024-11-20 22:45:17,099 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:17,099 INFO L85 PathProgramCache]: Analyzing trace with hash 1945246326, now seen corresponding path program 1 times [2024-11-20 22:45:17,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:17,099 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [609352770] [2024-11-20 22:45:17,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:17,100 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:17,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:17,141 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:17,141 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:17,141 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [609352770] [2024-11-20 22:45:17,141 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [609352770] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:17,141 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:17,141 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:17,141 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [200499520] [2024-11-20 22:45:17,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:17,142 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:17,142 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:17,142 INFO L85 PathProgramCache]: Analyzing trace with hash -717798668, now seen corresponding path program 4 times [2024-11-20 22:45:17,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:17,142 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [587774259] [2024-11-20 22:45:17,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:17,143 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:17,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:17,219 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-20 22:45:17,219 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:17,220 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [587774259] [2024-11-20 22:45:17,220 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [587774259] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:17,220 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:17,220 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:17,220 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1261134965] [2024-11-20 22:45:17,220 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:17,220 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:17,220 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:17,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:45:17,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:45:17,221 INFO L87 Difference]: Start difference. First operand 15840 states and 29052 transitions. cyclomatic complexity: 13213 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:17,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:17,454 INFO L93 Difference]: Finished difference Result 15840 states and 29051 transitions. [2024-11-20 22:45:17,454 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15840 states and 29051 transitions. [2024-11-20 22:45:17,540 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:17,581 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15840 states to 15840 states and 29051 transitions. [2024-11-20 22:45:17,582 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15840 [2024-11-20 22:45:17,593 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15840 [2024-11-20 22:45:17,593 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15840 states and 29051 transitions. [2024-11-20 22:45:17,604 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:17,604 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29051 transitions. [2024-11-20 22:45:17,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15840 states and 29051 transitions. [2024-11-20 22:45:17,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15840 to 15840. [2024-11-20 22:45:17,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15840 states, 15840 states have (on average 1.8340277777777778) internal successors, (29051), 15839 states have internal predecessors, (29051), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:17,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15840 states to 15840 states and 29051 transitions. [2024-11-20 22:45:17,798 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29051 transitions. [2024-11-20 22:45:17,798 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:45:17,799 INFO L425 stractBuchiCegarLoop]: Abstraction has 15840 states and 29051 transitions. [2024-11-20 22:45:17,799 INFO L332 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2024-11-20 22:45:17,799 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15840 states and 29051 transitions. [2024-11-20 22:45:17,847 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-20 22:45:17,847 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:17,847 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:17,851 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:17,851 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:17,851 INFO L745 eck$LassoCheckResult]: Stem: 505090#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 505091#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 506117#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 505637#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 505638#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 505635#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 505636#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 504951#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 504952#L104 assume !(0 == getOrigin_~person#1); 506429#L108 assume !(1 == getOrigin_~person#1); 505124#L112 assume !(2 == getOrigin_~person#1); 505125#L116 assume !(3 == getOrigin_~person#1); 506584#L120 assume !(4 == getOrigin_~person#1); 506343#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 505114#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 505115#L3009 assume !(0 == initPersonOnFloor_~floor#1); 506017#L3036 assume 1 == initPersonOnFloor_~floor#1; 506018#L3037 assume !(0 == initPersonOnFloor_~person#1); 506694#L3040 assume !(1 == initPersonOnFloor_~person#1); 505328#L3043 assume !(2 == initPersonOnFloor_~person#1); 505329#L3046 assume !(3 == initPersonOnFloor_~person#1); 506915#L3049 assume !(4 == initPersonOnFloor_~person#1); 505165#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 505166#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 506502#L2801 assume !(0 == callOnFloor_~floorID#1); 506846#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 505606#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 505790#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 505443#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 505444#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 504921#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 504922#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 506962#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 506227#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 505134#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 505136#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 507077#L2073 assume !(0 != timeShift_~tmp___9~2#1); 505414#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 505415#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 511174#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 511175#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 505450#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 511229#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 507085#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 511227#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 511225#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 506013#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 504852#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 504747#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 504748#L1892-2 assume !(1 == ~currentHeading~0); 506027#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 506028#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 506423#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 506470#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 506471#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 506150#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 506151#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 508919#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 514553#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 514551#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 507104#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 507102#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 507100#L890-2 [2024-11-20 22:45:17,852 INFO L747 eck$LassoCheckResult]: Loop: 507100#L890-2 assume !false; 507101#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 518813#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 507096#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 507095#L898 assume 1 != cleanup_~tmp___0~1#1; 507093#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 507094#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 518808#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 518805#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 518803#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 518804#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 519013#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 519008#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 505928#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 505407#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 519339#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 519338#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 519335#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 519223#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 519218#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 519217#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 519216#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 519214#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 519206#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 519204#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 519202#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 519199#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 519198#L2164-3 assume !(1 == ~doorState~0); 509270#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 519196#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 519191#L1685-2 assume !(0 == ~currentFloorID~0); 519189#L1691-2 assume ~currentFloorID~0 > 0; 519188#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 519187#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 519184#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 519087#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 519066#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 519062#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 519058#L1892-3 assume !(1 == ~currentHeading~0); 519052#L1902-9 assume !(0 == ~currentFloorID~0); 519047#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 519044#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 519042#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 519041#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 519039#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 519036#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 519022#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 519027#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 519025#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 518314#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 518315#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 518814#L890-2 assume !false; 507099#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 507097#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 507098#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 518812#L898 assume 1 != cleanup_~tmp___0~1#1; 518811#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 507092#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 507091#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 507089#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 507088#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 506930#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 506931#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 506372#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 506756#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 518997#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 518996#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 518995#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 518993#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 518991#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 518989#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 518986#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 518985#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 518984#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 518979#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 518977#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 518975#L2164-3 assume !(1 == ~doorState~0); 511323#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 518970#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 518966#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 518880#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 518965#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 518857#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 518948#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 518944#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 518864#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 518858#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 518854#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 518852#L1892-5 assume !(1 == ~currentHeading~0); 518846#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 518844#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 518843#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 518840#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 518839#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 518837#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 518836#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 518835#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 518827#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 518817#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 518816#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 507103#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 507100#L890-2 [2024-11-20 22:45:17,853 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:17,853 INFO L85 PathProgramCache]: Analyzing trace with hash -977913672, now seen corresponding path program 1 times [2024-11-20 22:45:17,853 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:17,853 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [270213724] [2024-11-20 22:45:17,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:17,853 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:17,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:17,923 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:17,923 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:17,923 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [270213724] [2024-11-20 22:45:17,924 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [270213724] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:17,924 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:17,924 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:17,924 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [282938013] [2024-11-20 22:45:17,924 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:17,925 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:17,925 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:17,925 INFO L85 PathProgramCache]: Analyzing trace with hash -1207925966, now seen corresponding path program 2 times [2024-11-20 22:45:17,925 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:17,925 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [480930730] [2024-11-20 22:45:17,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:17,926 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:17,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:18,024 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-20 22:45:18,024 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:18,024 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [480930730] [2024-11-20 22:45:18,024 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [480930730] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:18,025 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:18,025 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:18,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [525341334] [2024-11-20 22:45:18,025 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:18,025 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:18,025 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:18,026 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-20 22:45:18,026 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-20 22:45:18,026 INFO L87 Difference]: Start difference. First operand 15840 states and 29051 transitions. cyclomatic complexity: 13212 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:18,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:18,219 INFO L93 Difference]: Finished difference Result 28063 states and 51408 transitions. [2024-11-20 22:45:18,219 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28063 states and 51408 transitions. [2024-11-20 22:45:18,482 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24908 [2024-11-20 22:45:18,548 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28063 states to 28063 states and 51408 transitions. [2024-11-20 22:45:18,548 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28063 [2024-11-20 22:45:18,569 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28063 [2024-11-20 22:45:18,569 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28063 states and 51408 transitions. [2024-11-20 22:45:18,585 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:18,585 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28063 states and 51408 transitions. [2024-11-20 22:45:18,600 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28063 states and 51408 transitions. [2024-11-20 22:45:18,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28063 to 28043. [2024-11-20 22:45:18,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28043 states, 28043 states have (on average 1.8321149663017509) internal successors, (51378), 28042 states have internal predecessors, (51378), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:18,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28043 states to 28043 states and 51378 transitions. [2024-11-20 22:45:18,828 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28043 states and 51378 transitions. [2024-11-20 22:45:18,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-20 22:45:18,828 INFO L425 stractBuchiCegarLoop]: Abstraction has 28043 states and 51378 transitions. [2024-11-20 22:45:18,828 INFO L332 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2024-11-20 22:45:18,828 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28043 states and 51378 transitions. [2024-11-20 22:45:18,903 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24888 [2024-11-20 22:45:18,903 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:18,903 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:18,911 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:18,911 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:18,912 INFO L745 eck$LassoCheckResult]: Stem: 549002#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 549003#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 550015#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 549539#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 549540#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 549541#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 549542#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 548863#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 548864#L104 assume !(0 == getOrigin_~person#1); 550321#L108 assume !(1 == getOrigin_~person#1); 549036#L112 assume !(2 == getOrigin_~person#1); 549037#L116 assume !(3 == getOrigin_~person#1); 550465#L120 assume !(4 == getOrigin_~person#1); 550235#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 549026#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 549027#L3009 assume !(0 == initPersonOnFloor_~floor#1); 549918#L3036 assume 1 == initPersonOnFloor_~floor#1; 549919#L3037 assume !(0 == initPersonOnFloor_~person#1); 550569#L3040 assume !(1 == initPersonOnFloor_~person#1); 549234#L3043 assume !(2 == initPersonOnFloor_~person#1); 549235#L3046 assume !(3 == initPersonOnFloor_~person#1); 550782#L3049 assume !(4 == initPersonOnFloor_~person#1); 549076#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 549077#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 550385#L2801 assume !(0 == callOnFloor_~floorID#1); 550722#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 549510#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 550932#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 550931#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 550930#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 550929#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 550928#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 550831#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 550127#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 549046#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 549048#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 550927#L2073 assume !(0 != timeShift_~tmp___9~2#1); 549319#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 549320#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 548684#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 548685#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 549866#L1520 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 549868#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 550134#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 550048#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 550050#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 550409#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 550933#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 550402#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 550403#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 550522#L1892-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 550523#isTopFloor_returnLabel#5 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 550072#L1896-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 550073#L1902-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 553168#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 558011#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 558008#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 558005#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 558003#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 557965#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 557970#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 557968#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 557951#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 557948#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 557947#L890-2 [2024-11-20 22:45:18,912 INFO L747 eck$LassoCheckResult]: Loop: 557947#L890-2 assume !false; 557946#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 554317#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 554316#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 554290#L898 assume 1 != cleanup_~tmp___0~1#1; 553257#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553111#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 553112#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 557014#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 553030#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553027#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 553004#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 552995#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 552962#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 552948#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 552886#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 552883#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 552864#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 552858#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 552840#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 552834#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 552828#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 552820#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 552811#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 552808#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 552804#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 552801#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 552798#L2164-3 assume !(1 == ~doorState~0); 552795#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 552794#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 552793#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 552791#L1520-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 552789#L1526-2 assume ~currentFloorID~0 < 0; 552787#L1527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 552788#L2738-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 552790#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret54#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1; 552785#L1531-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 552786#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 552885#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 553357#L1892-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 553348#isTopFloor_returnLabel#7 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 553337#L1896-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 553324#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 553314#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 553309#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 553307#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 553302#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 553298#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 554499#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 554500#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 553243#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 553240#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 553142#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 553137#L890-2 assume !false; 553132#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 553130#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 553127#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 553128#L898 assume 1 != cleanup_~tmp___0~1#1; 553097#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553098#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 553039#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 551723#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 551725#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553270#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 553262#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 553258#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 553259#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 553102#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 553103#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 553036#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553037#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 554330#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 554329#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 554328#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 554327#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 554326#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 554325#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 554324#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 554322#L2164-3 assume !(1 == ~doorState~0); 553641#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 553642#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 554320#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 553637#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 554315#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 554308#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 554304#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 554305#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 553570#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 553565#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 553562#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 553563#L1892-5 assume !(1 == ~currentHeading~0); 558026#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 553333#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 553321#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 558012#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 558009#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 558006#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 558004#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 558001#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 557995#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 557973#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 557952#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 557949#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 557947#L890-2 [2024-11-20 22:45:18,913 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:18,913 INFO L85 PathProgramCache]: Analyzing trace with hash -510371608, now seen corresponding path program 1 times [2024-11-20 22:45:18,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:18,913 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [527274996] [2024-11-20 22:45:18,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:18,913 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:18,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:19,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:19,169 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:19,169 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [527274996] [2024-11-20 22:45:19,169 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [527274996] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:19,169 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:19,169 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:45:19,169 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1761071712] [2024-11-20 22:45:19,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:19,170 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:19,170 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:19,170 INFO L85 PathProgramCache]: Analyzing trace with hash 1313774649, now seen corresponding path program 1 times [2024-11-20 22:45:19,170 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:19,170 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1143733387] [2024-11-20 22:45:19,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:19,171 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:19,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:19,274 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-11-20 22:45:19,274 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:19,274 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1143733387] [2024-11-20 22:45:19,275 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1143733387] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:19,275 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:19,275 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:19,275 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [345930748] [2024-11-20 22:45:19,275 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:19,275 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:19,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:19,276 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:45:19,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:45:19,276 INFO L87 Difference]: Start difference. First operand 28043 states and 51378 transitions. cyclomatic complexity: 23336 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:19,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:19,516 INFO L93 Difference]: Finished difference Result 28063 states and 51352 transitions. [2024-11-20 22:45:19,516 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28063 states and 51352 transitions. [2024-11-20 22:45:19,619 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24908 [2024-11-20 22:45:19,692 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28063 states to 28063 states and 51352 transitions. [2024-11-20 22:45:19,692 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28063 [2024-11-20 22:45:19,713 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28063 [2024-11-20 22:45:19,714 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28063 states and 51352 transitions. [2024-11-20 22:45:19,732 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:19,732 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28063 states and 51352 transitions. [2024-11-20 22:45:19,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28063 states and 51352 transitions. [2024-11-20 22:45:20,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28063 to 28043. [2024-11-20 22:45:20,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28043 states, 28043 states have (on average 1.8301180330207183) internal successors, (51322), 28042 states have internal predecessors, (51322), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:20,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28043 states to 28043 states and 51322 transitions. [2024-11-20 22:45:20,188 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28043 states and 51322 transitions. [2024-11-20 22:45:20,189 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:45:20,189 INFO L425 stractBuchiCegarLoop]: Abstraction has 28043 states and 51322 transitions. [2024-11-20 22:45:20,189 INFO L332 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2024-11-20 22:45:20,189 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28043 states and 51322 transitions. [2024-11-20 22:45:20,266 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24888 [2024-11-20 22:45:20,266 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:20,266 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:20,273 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:20,273 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:20,273 INFO L745 eck$LassoCheckResult]: Stem: 605122#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 605123#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 606144#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 605663#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 605664#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 605665#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 605666#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 604984#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 604985#L104 assume !(0 == getOrigin_~person#1); 606451#L108 assume !(1 == getOrigin_~person#1); 605157#L112 assume !(2 == getOrigin_~person#1); 605158#L116 assume !(3 == getOrigin_~person#1); 606603#L120 assume !(4 == getOrigin_~person#1); 606360#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 605146#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 605147#L3009 assume !(0 == initPersonOnFloor_~floor#1); 606045#L3036 assume 1 == initPersonOnFloor_~floor#1; 606046#L3037 assume !(0 == initPersonOnFloor_~person#1); 606708#L3040 assume !(1 == initPersonOnFloor_~person#1); 605357#L3043 assume !(2 == initPersonOnFloor_~person#1); 605358#L3046 assume !(3 == initPersonOnFloor_~person#1); 606936#L3049 assume !(4 == initPersonOnFloor_~person#1); 605197#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 605198#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 606521#L2801 assume !(0 == callOnFloor_~floorID#1); 606862#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 605634#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 607102#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 607101#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 607100#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 607099#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 607098#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 606981#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 606249#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 605167#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 605169#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 607096#L2073 assume !(0 != timeShift_~tmp___9~2#1); 605442#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 605443#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 604804#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 604805#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 605992#L1520 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 605994#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 609283#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 606174#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 606176#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 607103#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 607104#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 606538#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 606539#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 606660#L1892-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 606661#isTopFloor_returnLabel#5 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 606198#L1896-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 606199#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 609223#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 609220#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 609219#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 609218#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 609217#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 609203#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 609208#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 609206#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 609201#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 609200#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 609197#L890-2 [2024-11-20 22:45:20,274 INFO L747 eck$LassoCheckResult]: Loop: 609197#L890-2 assume !false; 609192#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 609190#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 609185#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 609183#L898 assume 1 != cleanup_~tmp___0~1#1; 609181#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609179#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 609040#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 607865#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 607867#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609389#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 619477#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 619476#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 619467#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 619463#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 609311#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 609312#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609293#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 609294#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 628882#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 628881#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 628880#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 628879#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 628875#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 628873#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 628867#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 628865#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 607816#L2164-3 assume !(1 == ~doorState~0); 607814#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 607808#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 607809#L1685-2 assume !(0 == ~currentFloorID~0); 607407#L1691-2 assume ~currentFloorID~0 > 0; 607405#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 607406#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 607787#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 607403#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 607404#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 608568#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 609493#L1892-3 assume !(1 == ~currentHeading~0); 609483#L1902-9 assume !(0 == ~currentFloorID~0); 609473#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 609469#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 609466#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 609465#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 609464#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 609460#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 614886#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 614891#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 614889#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 614884#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 614883#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 614882#L890-2 assume !false; 614881#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 614880#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 614879#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 614878#L898 assume 1 != cleanup_~tmp___0~1#1; 614877#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 614876#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 614875#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 614874#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 614873#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609388#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 609384#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 609383#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 609329#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 609317#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 609318#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 609302#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609303#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 619462#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 619387#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 619388#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 605711#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 605712#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 606276#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 619185#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 605752#L2164-3 assume !(1 == ~doorState~0); 605753#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 610434#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 610435#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 610400#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 610390#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 610388#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 610383#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 610381#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 610343#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 610337#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 610336#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 609551#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 609547#getReverseHeading_returnLabel#4 timeShift_#t~ret89#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 609511#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 609507#isTopFloor_returnLabel#9 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 609496#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 609487#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 609475#L1908-9 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 609471#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 609467#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 609462#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 609458#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 609456#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 609457#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 609443#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 609442#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 609199#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 609197#L890-2 [2024-11-20 22:45:20,274 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:20,274 INFO L85 PathProgramCache]: Analyzing trace with hash 190692970, now seen corresponding path program 1 times [2024-11-20 22:45:20,274 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:20,275 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1804453745] [2024-11-20 22:45:20,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:20,275 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:20,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:20,395 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:20,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:20,396 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1804453745] [2024-11-20 22:45:20,396 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1804453745] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:20,396 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:20,397 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-20 22:45:20,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1660926377] [2024-11-20 22:45:20,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:20,397 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:20,397 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:20,398 INFO L85 PathProgramCache]: Analyzing trace with hash -175750004, now seen corresponding path program 1 times [2024-11-20 22:45:20,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:20,398 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1719155573] [2024-11-20 22:45:20,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:20,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:20,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:20,538 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-20 22:45:20,539 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:20,539 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1719155573] [2024-11-20 22:45:20,539 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1719155573] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:20,539 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:20,539 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:20,539 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1723578909] [2024-11-20 22:45:20,539 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:20,540 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:20,540 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:20,540 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:45:20,540 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:45:20,540 INFO L87 Difference]: Start difference. First operand 28043 states and 51322 transitions. cyclomatic complexity: 23280 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:20,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:20,992 INFO L93 Difference]: Finished difference Result 31682 states and 57993 transitions. [2024-11-20 22:45:20,992 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31682 states and 57993 transitions. [2024-11-20 22:45:21,379 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28286 [2024-11-20 22:45:21,473 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31682 states to 31682 states and 57993 transitions. [2024-11-20 22:45:21,473 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31682 [2024-11-20 22:45:21,500 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31682 [2024-11-20 22:45:21,500 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31682 states and 57993 transitions. [2024-11-20 22:45:21,522 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:21,523 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31682 states and 57993 transitions. [2024-11-20 22:45:21,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31682 states and 57993 transitions. [2024-11-20 22:45:21,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31682 to 31430. [2024-11-20 22:45:21,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31430 states, 31430 states have (on average 1.8326121539930003) internal successors, (57599), 31429 states have internal predecessors, (57599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:21,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31430 states to 31430 states and 57599 transitions. [2024-11-20 22:45:21,901 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31430 states and 57599 transitions. [2024-11-20 22:45:21,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:45:21,901 INFO L425 stractBuchiCegarLoop]: Abstraction has 31430 states and 57599 transitions. [2024-11-20 22:45:21,901 INFO L332 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2024-11-20 22:45:21,901 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31430 states and 57599 transitions. [2024-11-20 22:45:22,001 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28144 [2024-11-20 22:45:22,001 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:22,001 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:22,008 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:22,009 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:22,009 INFO L745 eck$LassoCheckResult]: Stem: 664866#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 664867#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 665879#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 665408#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 665409#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 665406#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 665407#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 664727#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 664728#L104 assume !(0 == getOrigin_~person#1); 666181#L108 assume !(1 == getOrigin_~person#1); 664901#L112 assume !(2 == getOrigin_~person#1); 664902#L116 assume !(3 == getOrigin_~person#1); 666328#L120 assume !(4 == getOrigin_~person#1); 666092#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 664891#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 664892#L3009 assume !(0 == initPersonOnFloor_~floor#1); 665780#L3036 assume 1 == initPersonOnFloor_~floor#1; 665781#L3037 assume !(0 == initPersonOnFloor_~person#1); 666439#L3040 assume !(1 == initPersonOnFloor_~person#1); 665102#L3043 assume !(2 == initPersonOnFloor_~person#1); 665103#L3046 assume !(3 == initPersonOnFloor_~person#1); 666650#L3049 assume !(4 == initPersonOnFloor_~person#1); 664941#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 664942#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 666248#L2801 assume !(0 == callOnFloor_~floorID#1); 666591#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 665377#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 666788#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 666787#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 666786#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 666785#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 666784#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 666692#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 665986#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 664911#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 664913#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 666782#L2073 assume !(0 != timeShift_~tmp___9~2#1); 665185#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 665186#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 664545#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 664546#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 665730#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 665731#L1526 assume !(~currentFloorID~0 < 0); 666605#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 665881#$Ultimate##1986 assume ~currentFloorID~0 < 1; 665714#L1556 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 665716#$Ultimate##2002 assume ~currentFloorID~0 < 1; 665340#L1572 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 665342#L1573 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 666794#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 666795#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 664669#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 664670#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 665268#L1896 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 665269#L1902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 669034#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 669031#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 669028#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 669019#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 669018#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 668999#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 669004#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 669002#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 668996#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 668994#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 668993#L890-2 [2024-11-20 22:45:22,010 INFO L747 eck$LassoCheckResult]: Loop: 668993#L890-2 assume !false; 668992#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 668991#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 668990#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 668989#L898 assume 1 != cleanup_~tmp___0~1#1; 668988#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668987#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668986#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 668981#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 668442#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668443#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 668339#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668340#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 668318#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 668305#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 668301#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 668299#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668296#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 668243#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668226#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 668187#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 668177#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 668173#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 668165#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 668001#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 667993#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 667090#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 667088#L2164-3 assume !(1 == ~doorState~0); 667083#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 667081#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 667079#L1685-2 assume !(0 == ~currentFloorID~0); 667080#L1691-2 assume ~currentFloorID~0 > 0; 667619#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 667089#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 667084#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 667085#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 667618#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 670729#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 670728#L1892-3 assume !(1 == ~currentHeading~0); 670727#L1902-9 assume !(0 == ~currentFloorID~0); 668658#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 670724#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 670722#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 670721#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 670719#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 670716#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 670715#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 670714#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 670705#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 670704#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 670672#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 670670#L890-2 assume !false; 670669#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 670668#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 670667#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 670666#L898 assume 1 != cleanup_~tmp___0~1#1; 670665#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 670664#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 670276#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 667543#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 667545#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668346#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 668347#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668337#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 668338#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 668963#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 668961#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 668959#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668956#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668954#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 668952#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 668950#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 668948#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 668945#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 668944#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 668942#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 668940#L2164-3 assume !(1 == ~doorState~0); 668936#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 668934#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 668935#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 669503#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 669502#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 669500#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 669499#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 669497#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 669173#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 669140#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 669064#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 669065#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 669155#getReverseHeading_returnLabel#4 timeShift_#t~ret89#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 669069#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 669060#isTopFloor_returnLabel#9 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 669047#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 669042#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 669039#L1908-9 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 669038#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 669037#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 669036#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 669032#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 669008#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 669013#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 669011#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 668997#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 668995#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 668993#L890-2 [2024-11-20 22:45:22,011 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:22,011 INFO L85 PathProgramCache]: Analyzing trace with hash -1384011050, now seen corresponding path program 1 times [2024-11-20 22:45:22,011 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:22,011 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [274424052] [2024-11-20 22:45:22,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:22,011 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:22,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:22,105 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:22,105 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:22,105 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [274424052] [2024-11-20 22:45:22,105 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [274424052] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:22,105 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:22,105 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:45:22,105 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565654041] [2024-11-20 22:45:22,105 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:22,106 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:22,106 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:22,106 INFO L85 PathProgramCache]: Analyzing trace with hash 233074384, now seen corresponding path program 2 times [2024-11-20 22:45:22,106 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:22,106 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260259813] [2024-11-20 22:45:22,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:22,107 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:22,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:22,211 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-20 22:45:22,212 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:22,212 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260259813] [2024-11-20 22:45:22,212 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [260259813] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:22,212 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:22,212 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:22,213 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [259834397] [2024-11-20 22:45:22,213 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:22,213 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:22,213 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:22,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:45:22,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:45:22,214 INFO L87 Difference]: Start difference. First operand 31430 states and 57599 transitions. cyclomatic complexity: 26171 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:22,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:22,639 INFO L93 Difference]: Finished difference Result 31664 states and 57665 transitions. [2024-11-20 22:45:22,639 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31664 states and 57665 transitions. [2024-11-20 22:45:22,754 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28372 [2024-11-20 22:45:22,839 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31664 states to 31664 states and 57665 transitions. [2024-11-20 22:45:22,839 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31664 [2024-11-20 22:45:22,862 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31664 [2024-11-20 22:45:22,862 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31664 states and 57665 transitions. [2024-11-20 22:45:22,881 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:22,881 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31664 states and 57665 transitions. [2024-11-20 22:45:22,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31664 states and 57665 transitions. [2024-11-20 22:45:23,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31664 to 31430. [2024-11-20 22:45:23,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31430 states, 31430 states have (on average 1.8219217308304168) internal successors, (57263), 31429 states have internal predecessors, (57263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:23,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31430 states to 31430 states and 57263 transitions. [2024-11-20 22:45:23,161 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31430 states and 57263 transitions. [2024-11-20 22:45:23,162 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-20 22:45:23,162 INFO L425 stractBuchiCegarLoop]: Abstraction has 31430 states and 57263 transitions. [2024-11-20 22:45:23,163 INFO L332 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2024-11-20 22:45:23,163 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31430 states and 57263 transitions. [2024-11-20 22:45:23,245 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28144 [2024-11-20 22:45:23,245 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:23,245 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:23,251 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:23,252 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:23,252 INFO L745 eck$LassoCheckResult]: Stem: 727972#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 727973#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 728995#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 728510#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 728511#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 728512#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 728513#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 727832#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 727833#L104 assume !(0 == getOrigin_~person#1); 729307#L108 assume !(1 == getOrigin_~person#1); 728006#L112 assume !(2 == getOrigin_~person#1); 728007#L116 assume !(3 == getOrigin_~person#1); 729465#L120 assume !(4 == getOrigin_~person#1); 729216#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 727996#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 727997#L3009 assume !(0 == initPersonOnFloor_~floor#1); 728898#L3036 assume 1 == initPersonOnFloor_~floor#1; 728899#L3037 assume !(0 == initPersonOnFloor_~person#1); 729569#L3040 assume !(1 == initPersonOnFloor_~person#1); 728207#L3043 assume !(2 == initPersonOnFloor_~person#1); 728208#L3046 assume !(3 == initPersonOnFloor_~person#1); 729782#L3049 assume !(4 == initPersonOnFloor_~person#1); 728047#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 728048#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 729379#L2801 assume !(0 == callOnFloor_~floorID#1); 729722#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 728481#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 729945#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 729944#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 729943#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 729942#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 729941#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 729833#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 729102#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 728016#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 728018#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 729939#L2073 assume !(0 != timeShift_~tmp___9~2#1); 728291#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 728292#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 729507#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 729416#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 729417#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 729739#L1526 assume !(~currentFloorID~0 < 0); 729740#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 728997#$Ultimate##1986 assume ~currentFloorID~0 < 1; 728998#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 729868#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 729869#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 728632#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 728633#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 729951#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 729952#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 727775#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 727776#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 728375#L1896 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 728376#L1902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 731922#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 731920#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 731919#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 731918#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 731917#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 731903#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 731908#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 731906#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 731901#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 731899#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 731796#L890-2 [2024-11-20 22:45:23,252 INFO L747 eck$LassoCheckResult]: Loop: 731796#L890-2 assume !false; 731638#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 731572#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 731566#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 731508#L898 assume 1 != cleanup_~tmp___0~1#1; 731507#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 731506#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 731503#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 730108#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 730110#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 731385#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 731375#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 731376#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 731316#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 731291#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 731288#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 731147#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 731114#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 731115#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 747334#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 747333#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 747332#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 747331#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 747327#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 747325#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 747319#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 747317#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 730373#L2164-3 assume !(1 == ~doorState~0); 730370#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 730367#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 730365#L1685-2 assume !(0 == ~currentFloorID~0); 730363#L1691-2 assume ~currentFloorID~0 > 0; 730364#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 730369#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 730366#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 730361#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 730362#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 730576#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 732231#L1892-3 assume !(1 == ~currentHeading~0); 732221#L1902-9 assume !(0 == ~currentFloorID~0); 732208#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 732202#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 732197#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 732195#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 732192#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 732188#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 737763#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 737764#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 737750#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 737749#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 737748#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 737747#L890-2 assume !false; 737746#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 737745#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 737744#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 737743#L898 assume 1 != cleanup_~tmp___0~1#1; 737742#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 737741#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 737740#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 737739#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 737738#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 737737#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 737733#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 731373#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 731374#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 736774#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 736772#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 736769#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 736767#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 736765#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 736763#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 736761#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 736759#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 736756#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 736754#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 736752#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 736751#L2164-3 assume !(1 == ~doorState~0); 736747#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 736744#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 736745#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 738970#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 738968#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 738964#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 738965#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 738944#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 736974#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 732252#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 732250#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 732247#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 732243#getReverseHeading_returnLabel#4 timeShift_#t~ret89#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 732234#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 732225#isTopFloor_returnLabel#9 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 732210#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 732204#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 732198#L1908-9 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 732196#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 732194#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 732190#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 732184#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 731993#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 731998#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 731996#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 731989#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 731900#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 731796#L890-2 [2024-11-20 22:45:23,253 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:23,253 INFO L85 PathProgramCache]: Analyzing trace with hash 1979415046, now seen corresponding path program 1 times [2024-11-20 22:45:23,253 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:23,253 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1330672901] [2024-11-20 22:45:23,253 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:23,253 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:23,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:23,689 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:23,689 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:23,689 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1330672901] [2024-11-20 22:45:23,689 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1330672901] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:23,690 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:23,690 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:23,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1243726380] [2024-11-20 22:45:23,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:23,690 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:23,691 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:23,691 INFO L85 PathProgramCache]: Analyzing trace with hash 233074384, now seen corresponding path program 3 times [2024-11-20 22:45:23,691 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:23,691 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2014942852] [2024-11-20 22:45:23,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:23,691 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:23,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:23,776 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-20 22:45:23,777 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:23,777 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2014942852] [2024-11-20 22:45:23,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2014942852] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:23,777 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:23,777 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:23,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1467155786] [2024-11-20 22:45:23,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:23,778 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:23,778 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:23,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-20 22:45:23,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-11-20 22:45:23,778 INFO L87 Difference]: Start difference. First operand 31430 states and 57263 transitions. cyclomatic complexity: 25835 Second operand has 7 states, 7 states have (on average 9.428571428571429) internal successors, (66), 7 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:24,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:24,378 INFO L93 Difference]: Finished difference Result 32862 states and 59551 transitions. [2024-11-20 22:45:24,378 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 32862 states and 59551 transitions. [2024-11-20 22:45:24,502 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 29630 [2024-11-20 22:45:24,592 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 32862 states to 32862 states and 59551 transitions. [2024-11-20 22:45:24,593 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 32862 [2024-11-20 22:45:24,619 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 32862 [2024-11-20 22:45:24,620 INFO L73 IsDeterministic]: Start isDeterministic. Operand 32862 states and 59551 transitions. [2024-11-20 22:45:24,640 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:24,640 INFO L218 hiAutomatonCegarLoop]: Abstraction has 32862 states and 59551 transitions. [2024-11-20 22:45:24,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32862 states and 59551 transitions. [2024-11-20 22:45:25,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32862 to 32768. [2024-11-20 22:45:25,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32768 states, 32768 states have (on average 1.814483642578125) internal successors, (59457), 32767 states have internal predecessors, (59457), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:25,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32768 states to 32768 states and 59457 transitions. [2024-11-20 22:45:25,162 INFO L240 hiAutomatonCegarLoop]: Abstraction has 32768 states and 59457 transitions. [2024-11-20 22:45:25,162 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-20 22:45:25,163 INFO L425 stractBuchiCegarLoop]: Abstraction has 32768 states and 59457 transitions. [2024-11-20 22:45:25,163 INFO L332 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2024-11-20 22:45:25,163 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 32768 states and 59457 transitions. [2024-11-20 22:45:25,249 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 29536 [2024-11-20 22:45:25,250 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:25,250 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:25,256 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:25,257 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:25,257 INFO L745 eck$LassoCheckResult]: Stem: 792284#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 792285#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 793291#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 792819#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 792820#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 792817#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 792818#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 792145#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 792146#L104 assume !(0 == getOrigin_~person#1); 793604#L108 assume !(1 == getOrigin_~person#1); 792317#L112 assume !(2 == getOrigin_~person#1); 792318#L116 assume !(3 == getOrigin_~person#1); 793760#L120 assume !(4 == getOrigin_~person#1); 793512#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 792307#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 792308#L3009 assume !(0 == initPersonOnFloor_~floor#1); 793195#L3036 assume 1 == initPersonOnFloor_~floor#1; 793196#L3037 assume !(0 == initPersonOnFloor_~person#1); 793861#L3040 assume !(1 == initPersonOnFloor_~person#1); 792516#L3043 assume !(2 == initPersonOnFloor_~person#1); 792517#L3046 assume !(3 == initPersonOnFloor_~person#1); 794081#L3049 assume !(4 == initPersonOnFloor_~person#1); 792357#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 792358#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 793673#L2801 assume !(0 == callOnFloor_~floorID#1); 794016#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 792788#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 794237#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 794236#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 794235#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 794234#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 794233#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 794128#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 793401#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 792327#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 792329#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 794231#L2073 assume !(0 != timeShift_~tmp___9~2#1); 792600#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 792601#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 791963#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 791964#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 793142#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 793143#L1526 assume !(~currentFloorID~0 < 0); 794096#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 794097#$Ultimate##1986 assume ~currentFloorID~0 < 1; 793127#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 793128#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 794014#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 792936#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 792937#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 794244#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 794245#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 792087#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 792088#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 792683#L1896 assume !(0 != continueInDirection_~tmp~16#1); 792684#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 793412#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 793382#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 793445#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 793446#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 798343#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 795937#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 795942#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 795940#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 795926#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 795923#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 795922#L890-2 [2024-11-20 22:45:25,258 INFO L747 eck$LassoCheckResult]: Loop: 795922#L890-2 assume !false; 795921#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 795914#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 795910#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 795908#L898 assume 1 != cleanup_~tmp___0~1#1; 795907#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795906#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795905#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 795902#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 795898#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795897#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 795581#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795574#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 795305#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 795231#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 795184#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 795185#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795071#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 795062#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795057#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 795054#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 795055#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 795019#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 794986#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 794760#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 794729#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 794529#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 794527#L2164-3 assume !(1 == ~doorState~0); 794524#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 794523#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 794522#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 794520#L1520-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 794521#L1526-2 assume ~currentFloorID~0 < 0; 794811#L1527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 794823#L2738-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 794813#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret54#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1; 794746#L1531-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 794742#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 795466#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 795464#L1892-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 795462#isTopFloor_returnLabel#7 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 795461#L1896-9 assume !(0 != continueInDirection_~tmp~16#1); 795460#L1902-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 795458#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 795456#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 795455#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 795453#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 795450#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 795432#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 795437#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 795435#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 795424#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 795422#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 795420#L890-2 assume !false; 795418#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 795416#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 795414#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 795412#L898 assume 1 != cleanup_~tmp___0~1#1; 795411#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795410#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795398#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 795395#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 795392#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795390#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 795382#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795372#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 795294#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 795192#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 795193#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 795079#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795080#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795221#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 795219#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 795217#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 795215#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 795213#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 795210#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 795208#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 795205#L2164-3 assume !(1 == ~doorState~0); 795202#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 795201#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 795200#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 795198#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 795197#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 795196#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 795194#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 795186#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 795187#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 802213#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 802208#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 802206#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 802205#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 802204#isTopFloor_returnLabel#10 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 802203#L1896-15 assume !(0 != continueInDirection_~tmp~16#1); 795158#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 795957#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 795954#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 795953#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 795952#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 795951#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 795949#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 795950#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 795927#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 795925#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 795924#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 795922#L890-2 [2024-11-20 22:45:25,258 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:25,259 INFO L85 PathProgramCache]: Analyzing trace with hash 1536515906, now seen corresponding path program 1 times [2024-11-20 22:45:25,259 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:25,259 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1291573803] [2024-11-20 22:45:25,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:25,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:25,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:25,393 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:25,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:25,393 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1291573803] [2024-11-20 22:45:25,393 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1291573803] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:25,393 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:25,394 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:45:25,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189224190] [2024-11-20 22:45:25,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:25,394 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:25,394 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:25,394 INFO L85 PathProgramCache]: Analyzing trace with hash 337620839, now seen corresponding path program 1 times [2024-11-20 22:45:25,394 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:25,394 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [147763604] [2024-11-20 22:45:25,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:25,395 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:25,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:25,489 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-11-20 22:45:25,489 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:25,489 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [147763604] [2024-11-20 22:45:25,489 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [147763604] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:25,490 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:25,490 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:25,490 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [258754091] [2024-11-20 22:45:25,490 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:25,490 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:25,491 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:25,492 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-20 22:45:25,492 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-20 22:45:25,492 INFO L87 Difference]: Start difference. First operand 32768 states and 59457 transitions. cyclomatic complexity: 26691 Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:26,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:26,565 INFO L93 Difference]: Finished difference Result 56506 states and 101817 transitions. [2024-11-20 22:45:26,565 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 56506 states and 101817 transitions. [2024-11-20 22:45:26,834 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 53086 [2024-11-20 22:45:27,044 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 56506 states to 56426 states and 101721 transitions. [2024-11-20 22:45:27,044 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 56426 [2024-11-20 22:45:27,093 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 56426 [2024-11-20 22:45:27,093 INFO L73 IsDeterministic]: Start isDeterministic. Operand 56426 states and 101721 transitions. [2024-11-20 22:45:27,133 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:27,133 INFO L218 hiAutomatonCegarLoop]: Abstraction has 56426 states and 101721 transitions. [2024-11-20 22:45:27,163 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56426 states and 101721 transitions. [2024-11-20 22:45:27,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56426 to 52875. [2024-11-20 22:45:27,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52875 states, 52875 states have (on average 1.8029314420803781) internal successors, (95330), 52874 states have internal predecessors, (95330), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:28,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52875 states to 52875 states and 95330 transitions. [2024-11-20 22:45:28,187 INFO L240 hiAutomatonCegarLoop]: Abstraction has 52875 states and 95330 transitions. [2024-11-20 22:45:28,188 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-20 22:45:28,188 INFO L425 stractBuchiCegarLoop]: Abstraction has 52875 states and 95330 transitions. [2024-11-20 22:45:28,188 INFO L332 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2024-11-20 22:45:28,188 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52875 states and 95330 transitions. [2024-11-20 22:45:28,333 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 49543 [2024-11-20 22:45:28,333 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:28,333 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:28,344 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:28,344 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:28,345 INFO L745 eck$LassoCheckResult]: Stem: 881579#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 881580#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 882594#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 882109#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 882110#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 882111#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 882112#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 881438#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 881439#L104 assume !(0 == getOrigin_~person#1); 882904#L108 assume !(1 == getOrigin_~person#1); 881614#L112 assume !(2 == getOrigin_~person#1); 881615#L116 assume !(3 == getOrigin_~person#1); 883061#L120 assume !(4 == getOrigin_~person#1); 882810#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 881600#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 881601#L3009 assume !(0 == initPersonOnFloor_~floor#1); 882490#L3036 assume 1 == initPersonOnFloor_~floor#1; 882491#L3037 assume !(0 == initPersonOnFloor_~person#1); 883171#L3040 assume !(1 == initPersonOnFloor_~person#1); 881811#L3043 assume !(2 == initPersonOnFloor_~person#1); 881812#L3046 assume !(3 == initPersonOnFloor_~person#1); 883419#L3049 assume !(4 == initPersonOnFloor_~person#1); 881654#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 881655#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 882977#L2801 assume !(0 == callOnFloor_~floorID#1); 883347#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 882082#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 883616#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 883615#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 883614#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 883613#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 883612#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 883469#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 882703#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 881624#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 881626#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 883611#L2073 assume !(0 != timeShift_~tmp___9~2#1); 881894#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 881895#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 883108#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 883014#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 883015#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 883366#L1526 assume !(~currentFloorID~0 < 0); 883367#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 882596#$Ultimate##1986 assume ~currentFloorID~0 < 1; 882597#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 883521#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 883522#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 889345#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 882521#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 881928#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 883620#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 883622#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 882291#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 882292#L1896 assume !(0 != continueInDirection_~tmp~16#1); 881426#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 881427#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 883632#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 883633#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 883628#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 883629#$Ultimate##2467 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 889325#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 889323#areDoorsOpen_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 889320#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 889294#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 889290#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 889286#L890-2 [2024-11-20 22:45:28,345 INFO L747 eck$LassoCheckResult]: Loop: 889286#L890-2 assume !false; 889282#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 889274#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 889270#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 889268#L898 assume 1 != cleanup_~tmp___0~1#1; 885328#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 885329#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 885319#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 885320#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 885312#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 885314#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 885304#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 885305#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 884743#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 884736#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 884730#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 884731#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 884726#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 884722#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 884714#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 884472#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 884437#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 884233#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 884228#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 884226#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 884224#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 884190#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 884185#L2164-3 assume !(1 == ~doorState~0); 884181#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 884179#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 884177#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 884173#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 884171#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 884169#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 884165#L1947-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 884166#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 884357#L1516-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 884161#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 884355#L1520-3 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 884079#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 884353#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 884352#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 884351#isTopFloor_returnLabel#10 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 884350#L1896-15 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 884349#L1902-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 884348#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 884346#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 884345#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 884338#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 884335#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 883768#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 883761#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 883762#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 884292#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 884291#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 884290#L890-2 assume !false; 884289#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 884288#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 884287#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 884286#L898 assume 1 != cleanup_~tmp___0~1#1; 884285#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 884284#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 884283#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 884281#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 884279#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 884278#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 884274#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 884273#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 883690#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 883683#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 883678#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 883679#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 883674#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 883670#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 883671#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 883661#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 883662#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 883653#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 883654#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 883644#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 883645#L2164-3 assume !(1 == ~doorState~0); 889096#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 889094#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 889095#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 891898#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 891895#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 891891#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 891892#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 891885#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 889573#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 889568#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 889493#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 888894#L1892-5 assume !(1 == ~currentHeading~0); 889524#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 889464#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 889450#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 889444#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 889437#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 889434#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 889426#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 889423#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 889419#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 889404#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 889295#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 889291#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 889286#L890-2 [2024-11-20 22:45:28,346 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:28,346 INFO L85 PathProgramCache]: Analyzing trace with hash 1046388608, now seen corresponding path program 1 times [2024-11-20 22:45:28,346 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:28,346 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1665413929] [2024-11-20 22:45:28,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:28,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:28,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:28,389 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-20 22:45:28,390 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:28,390 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1665413929] [2024-11-20 22:45:28,390 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1665413929] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:28,390 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:28,390 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-20 22:45:28,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2115676704] [2024-11-20 22:45:28,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:28,392 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-20 22:45:28,392 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:28,393 INFO L85 PathProgramCache]: Analyzing trace with hash -2087000468, now seen corresponding path program 1 times [2024-11-20 22:45:28,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:28,393 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1302119496] [2024-11-20 22:45:28,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:28,393 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:28,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:28,474 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-11-20 22:45:28,475 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:28,475 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1302119496] [2024-11-20 22:45:28,475 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1302119496] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:28,475 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:28,475 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:28,475 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1438840187] [2024-11-20 22:45:28,476 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:28,476 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:28,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:28,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-20 22:45:28,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-20 22:45:28,477 INFO L87 Difference]: Start difference. First operand 52875 states and 95330 transitions. cyclomatic complexity: 42457 Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:28,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:28,764 INFO L93 Difference]: Finished difference Result 104843 states and 189094 transitions. [2024-11-20 22:45:28,764 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 104843 states and 189094 transitions. [2024-11-20 22:45:29,192 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 98918 [2024-11-20 22:45:30,018 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 104843 states to 104843 states and 189094 transitions. [2024-11-20 22:45:30,018 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 104843 [2024-11-20 22:45:30,100 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 104843 [2024-11-20 22:45:30,100 INFO L73 IsDeterministic]: Start isDeterministic. Operand 104843 states and 189094 transitions. [2024-11-20 22:45:30,160 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:30,160 INFO L218 hiAutomatonCegarLoop]: Abstraction has 104843 states and 189094 transitions. [2024-11-20 22:45:30,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104843 states and 189094 transitions. [2024-11-20 22:45:31,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104843 to 104843. [2024-11-20 22:45:31,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104843 states, 104843 states have (on average 1.803592037618153) internal successors, (189094), 104842 states have internal predecessors, (189094), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:31,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104843 states to 104843 states and 189094 transitions. [2024-11-20 22:45:31,462 INFO L240 hiAutomatonCegarLoop]: Abstraction has 104843 states and 189094 transitions. [2024-11-20 22:45:31,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-20 22:45:31,462 INFO L425 stractBuchiCegarLoop]: Abstraction has 104843 states and 189094 transitions. [2024-11-20 22:45:31,462 INFO L332 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2024-11-20 22:45:31,462 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 104843 states and 189094 transitions. [2024-11-20 22:45:31,758 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 98918 [2024-11-20 22:45:31,758 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:31,758 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:31,786 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:31,786 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:31,787 INFO L745 eck$LassoCheckResult]: Stem: 1039305#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1039306#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 1040317#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1039842#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 1039843#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 1039840#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1039841#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1039166#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1039167#L104 assume !(0 == getOrigin_~person#1); 1040628#L108 assume !(1 == getOrigin_~person#1); 1039340#L112 assume !(2 == getOrigin_~person#1); 1039341#L116 assume !(3 == getOrigin_~person#1); 1040778#L120 assume !(4 == getOrigin_~person#1); 1040535#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1039326#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1039327#L3009 assume !(0 == initPersonOnFloor_~floor#1); 1040222#L3036 assume 1 == initPersonOnFloor_~floor#1; 1040223#L3037 assume !(0 == initPersonOnFloor_~person#1); 1040874#L3040 assume !(1 == initPersonOnFloor_~person#1); 1039539#L3043 assume !(2 == initPersonOnFloor_~person#1); 1039540#L3046 assume !(3 == initPersonOnFloor_~person#1); 1041080#L3049 assume !(4 == initPersonOnFloor_~person#1); 1039380#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1039381#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1040695#L2801 assume !(0 == callOnFloor_~floorID#1); 1041023#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1039813#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1041224#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1041223#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1041222#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1041221#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1041220#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1041120#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1040426#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1039350#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1039352#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1041219#L2073 assume !(0 != timeShift_~tmp___9~2#1); 1039625#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 1039626#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1086405#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1086404#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1086403#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1086402#L1526 assume !(~currentFloorID~0 < 0); 1086401#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 1086400#$Ultimate##1986 assume ~currentFloorID~0 < 1; 1086399#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1086398#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 1086396#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1086393#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 1086388#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1086375#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1086373#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1086372#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1086371#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1086370#L1896 assume !(0 != continueInDirection_~tmp~16#1); 1086369#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1086301#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1086296#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1086294#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1086292#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086285#$Ultimate##2467 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1039912#L270 assume !(0 != ~floorButtons_spc2_1~0); 1039613#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1039614#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1040431#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086214#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1086064#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1086063#L890-2 [2024-11-20 22:45:31,787 INFO L747 eck$LassoCheckResult]: Loop: 1086063#L890-2 assume !false; 1086061#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1086059#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1086055#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1086043#L898 assume 1 != cleanup_~tmp___0~1#1; 1085845#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1085839#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1085815#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1085801#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1085795#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1085797#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1085788#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1085789#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1085699#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1085692#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1085671#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1085672#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1085552#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 1085449#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1085444#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1085442#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1085440#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1085383#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1085368#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1085364#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1085359#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1085355#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1085208#L2164-3 assume !(1 == ~doorState~0); 1085205#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1085203#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1085202#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1085199#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1085197#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1085196#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1085194#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1085193#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1085191#L1516-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1085163#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1085139#L1520-3 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1085136#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1085124#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1085123#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1085118#isTopFloor_returnLabel#10 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1085112#L1896-15 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1085107#L1902-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1085103#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1085101#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1085100#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1085098#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085080#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085078#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1041913#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1041915#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1041906#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1041905#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1041904#L890-2 assume !false; 1041903#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1041902#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1041901#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1041900#L898 assume 1 != cleanup_~tmp___0~1#1; 1041899#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1041898#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1041897#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1041895#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1041893#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1041892#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1041884#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1041874#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1041868#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1041860#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1041859#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1041858#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1041856#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1041854#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1041852#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1041850#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1041848#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1041845#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1041842#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1041839#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1041835#L2164-3 assume !(1 == ~doorState~0); 1041833#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1095336#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 1040099#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1040100#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1096152#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1096150#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1096146#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1095316#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 1095301#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1095297#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1086232#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1086230#L1892-5 assume !(1 == ~currentHeading~0); 1086091#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1086089#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1086087#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1086083#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1086081#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1086079#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086076#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1086073#L270-1 assume !(0 != ~floorButtons_spc2_1~0); 1059010#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086071#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086070#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1042428#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1086065#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1086063#L890-2 [2024-11-20 22:45:31,788 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:31,788 INFO L85 PathProgramCache]: Analyzing trace with hash -1605338435, now seen corresponding path program 1 times [2024-11-20 22:45:31,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:31,788 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [117347735] [2024-11-20 22:45:31,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:31,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:31,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-20 22:45:31,806 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-20 22:45:31,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-20 22:45:31,871 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-20 22:45:31,872 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:31,872 INFO L85 PathProgramCache]: Analyzing trace with hash 120754175, now seen corresponding path program 1 times [2024-11-20 22:45:31,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:31,872 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [705209740] [2024-11-20 22:45:31,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:31,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:31,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:31,958 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2024-11-20 22:45:31,958 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:31,958 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [705209740] [2024-11-20 22:45:31,958 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [705209740] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:31,958 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:31,958 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-20 22:45:31,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1888932629] [2024-11-20 22:45:31,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:31,959 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:31,959 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:31,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-20 22:45:31,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-20 22:45:31,960 INFO L87 Difference]: Start difference. First operand 104843 states and 189094 transitions. cyclomatic complexity: 84253 Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 7 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:33,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:33,933 INFO L93 Difference]: Finished difference Result 209813 states and 376097 transitions. [2024-11-20 22:45:33,933 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 209813 states and 376097 transitions. [2024-11-20 22:45:35,821 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 200458 [2024-11-20 22:45:36,445 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 209813 states to 209813 states and 376097 transitions. [2024-11-20 22:45:36,446 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 209813 [2024-11-20 22:45:36,621 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 209813 [2024-11-20 22:45:36,621 INFO L73 IsDeterministic]: Start isDeterministic. Operand 209813 states and 376097 transitions. [2024-11-20 22:45:36,746 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:36,746 INFO L218 hiAutomatonCegarLoop]: Abstraction has 209813 states and 376097 transitions. [2024-11-20 22:45:36,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209813 states and 376097 transitions. [2024-11-20 22:45:39,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209813 to 207399. [2024-11-20 22:45:39,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207399 states, 207399 states have (on average 1.801758928442278) internal successors, (373683), 207398 states have internal predecessors, (373683), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:39,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207399 states to 207399 states and 373683 transitions. [2024-11-20 22:45:39,575 INFO L240 hiAutomatonCegarLoop]: Abstraction has 207399 states and 373683 transitions. [2024-11-20 22:45:39,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-20 22:45:39,575 INFO L425 stractBuchiCegarLoop]: Abstraction has 207399 states and 373683 transitions. [2024-11-20 22:45:39,576 INFO L332 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2024-11-20 22:45:39,576 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 207399 states and 373683 transitions. [2024-11-20 22:45:41,223 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 198140 [2024-11-20 22:45:41,223 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-20 22:45:41,223 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-20 22:45:41,264 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:41,265 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-20 22:45:41,265 INFO L745 eck$LassoCheckResult]: Stem: 1353978#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1353979#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 1355010#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1354515#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 1354516#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 1354517#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1354518#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1353838#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1353839#L104 assume !(0 == getOrigin_~person#1); 1355328#L108 assume !(1 == getOrigin_~person#1); 1354012#L112 assume !(2 == getOrigin_~person#1); 1354013#L116 assume !(3 == getOrigin_~person#1); 1355482#L120 assume !(4 == getOrigin_~person#1); 1355235#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1353999#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1354000#L3009 assume !(0 == initPersonOnFloor_~floor#1); 1354904#L3036 assume 1 == initPersonOnFloor_~floor#1; 1354905#L3037 assume !(0 == initPersonOnFloor_~person#1); 1355602#L3040 assume !(1 == initPersonOnFloor_~person#1); 1354208#L3043 assume !(2 == initPersonOnFloor_~person#1); 1354209#L3046 assume !(3 == initPersonOnFloor_~person#1); 1355831#L3049 assume !(4 == initPersonOnFloor_~person#1); 1354053#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1354054#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1355397#L2801 assume !(0 == callOnFloor_~floorID#1); 1355766#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1355767#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1418218#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1418217#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1418216#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1418215#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1418210#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1418211#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1418214#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1418212#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1418213#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1418207#L2073 assume !(0 != timeShift_~tmp___9~2#1); 1354294#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 1354295#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1490266#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1490265#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1490264#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1490263#L1526 assume !(~currentFloorID~0 < 0); 1490262#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 1490261#$Ultimate##1986 assume ~currentFloorID~0 < 1; 1490260#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1490259#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 1490257#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1482735#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 1482673#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1482657#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1482650#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1482641#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1482632#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1482622#L1896 assume !(0 != continueInDirection_~tmp~16#1); 1482615#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1482609#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1482606#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1482604#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1482602#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482600#$Ultimate##2467 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1482598#L270 assume !(0 != ~floorButtons_spc2_1~0); 1482597#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482595#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482593#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482592#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1482590#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1482589#L890-2 [2024-11-20 22:45:41,266 INFO L747 eck$LassoCheckResult]: Loop: 1482589#L890-2 assume !false; 1482588#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1482587#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1482586#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1482585#L898 assume 1 != cleanup_~tmp___0~1#1; 1482584#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1482583#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1482582#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1482580#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1482578#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1482573#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1482572#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1482567#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1482493#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1482485#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1443405#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1443404#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1382262#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 1382259#L2742-26 assume !(1 == isFloorCalling_~floorID#1); 1382252#L2746-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382250#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1382247#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1382245#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1382242#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1382237#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1382234#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1382232#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1382230#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1382228#L2164-3 assume !(1 == ~doorState~0); 1382221#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1382219#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1382216#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1382213#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1382211#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1382208#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1382205#L1947-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1382206#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1382366#L1516-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1382200#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1382180#L1520-3 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1382179#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1382176#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1382174#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1382173#isTopFloor_returnLabel#10 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1382171#L1896-15 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1382162#L1902-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1382161#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1382158#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1382156#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1382151#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1382146#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1382144#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1382127#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1382129#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1356675#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1382121#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1382120#L890-2 assume !false; 1382119#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1382118#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1382117#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1382116#L898 assume 1 != cleanup_~tmp___0~1#1; 1382115#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1382114#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382113#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1382111#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1382109#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1382108#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1382106#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382107#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1382094#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1382084#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1382079#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1382078#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1382076#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382075#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1382074#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1382073#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1382072#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1382070#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1382064#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1382061#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1382062#L2164-3 assume !(1 == ~doorState~0); 1490598#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1490595#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 1490596#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1491182#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1491180#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1491177#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1491175#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1491173#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 1483020#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1483016#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1505170#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1482638#L1892-5 assume !(1 == ~currentHeading~0); 1482628#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1482619#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1482613#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1482607#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1482605#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1482603#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482601#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1482599#L270-1 assume !(0 != ~floorButtons_spc2_1~0); 1375444#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482596#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482594#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1375441#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1482591#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1482589#L890-2 [2024-11-20 22:45:41,267 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:41,267 INFO L85 PathProgramCache]: Analyzing trace with hash -1605338435, now seen corresponding path program 2 times [2024-11-20 22:45:41,267 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:41,267 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [863036030] [2024-11-20 22:45:41,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:41,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:41,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-20 22:45:41,296 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-20 22:45:41,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-20 22:45:41,346 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-20 22:45:41,346 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-20 22:45:41,347 INFO L85 PathProgramCache]: Analyzing trace with hash -136953169, now seen corresponding path program 1 times [2024-11-20 22:45:41,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-20 22:45:41,347 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1303656983] [2024-11-20 22:45:41,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-20 22:45:41,347 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-20 22:45:41,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-20 22:45:41,427 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-20 22:45:41,427 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-20 22:45:41,427 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1303656983] [2024-11-20 22:45:41,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1303656983] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-20 22:45:41,428 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-20 22:45:41,428 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-20 22:45:41,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [241852737] [2024-11-20 22:45:41,428 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-20 22:45:41,428 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-20 22:45:41,429 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-20 22:45:41,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-20 22:45:41,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-20 22:45:41,429 INFO L87 Difference]: Start difference. First operand 207399 states and 373683 transitions. cyclomatic complexity: 166286 Second operand has 5 states, 5 states have (on average 17.4) internal successors, (87), 5 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-20 22:45:44,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-20 22:45:44,036 INFO L93 Difference]: Finished difference Result 306725 states and 556237 transitions. [2024-11-20 22:45:44,036 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 306725 states and 556237 transitions. [2024-11-20 22:45:46,145 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 297466 [2024-11-20 22:45:46,974 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 306725 states to 306725 states and 556237 transitions. [2024-11-20 22:45:46,975 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 306725 [2024-11-20 22:45:47,195 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 306725 [2024-11-20 22:45:47,195 INFO L73 IsDeterministic]: Start isDeterministic. Operand 306725 states and 556237 transitions. [2024-11-20 22:45:47,362 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-20 22:45:47,362 INFO L218 hiAutomatonCegarLoop]: Abstraction has 306725 states and 556237 transitions. [2024-11-20 22:45:47,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306725 states and 556237 transitions.