./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec1_product21.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 8fc3dc66 Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec1_product21.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b57471ff7da280977e3c808cc9c84e84708264492bfd0c5193cf422adb691b70 --- Real Ultimate output --- This is Ultimate 0.3.0-?-8fc3dc6-m [2025-03-17 20:24:32,939 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-03-17 20:24:32,993 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2025-03-17 20:24:32,996 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-03-17 20:24:32,996 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-03-17 20:24:32,996 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.Remove goto edges from RCFG [2025-03-17 20:24:33,016 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-03-17 20:24:33,017 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-03-17 20:24:33,017 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-03-17 20:24:33,018 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-03-17 20:24:33,018 INFO L153 SettingsManager]: * Use memory slicer=true [2025-03-17 20:24:33,019 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-03-17 20:24:33,019 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-03-17 20:24:33,019 INFO L153 SettingsManager]: * Use SBE=true [2025-03-17 20:24:33,019 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * Use old map elimination=false [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2025-03-17 20:24:33,020 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * sizeof long=4 [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * sizeof POINTER=4 [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2025-03-17 20:24:33,020 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2025-03-17 20:24:33,021 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2025-03-17 20:24:33,021 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-03-17 20:24:33,021 INFO L153 SettingsManager]: * sizeof long double=12 [2025-03-17 20:24:33,021 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-03-17 20:24:33,021 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2025-03-17 20:24:33,021 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-03-17 20:24:33,021 INFO L153 SettingsManager]: * Use constant arrays=true [2025-03-17 20:24:33,021 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-03-17 20:24:33,021 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-03-17 20:24:33,022 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-03-17 20:24:33,022 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-03-17 20:24:33,022 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2025-03-17 20:24:33,023 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b57471ff7da280977e3c808cc9c84e84708264492bfd0c5193cf422adb691b70 [2025-03-17 20:24:33,256 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-03-17 20:24:33,262 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-03-17 20:24:33,265 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-03-17 20:24:33,265 INFO L270 PluginConnector]: Initializing CDTParser... [2025-03-17 20:24:33,266 INFO L274 PluginConnector]: CDTParser initialized [2025-03-17 20:24:33,266 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec1_product21.cil.c [2025-03-17 20:24:34,480 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4b69a50b0/81c4e99bdac142a1b1031a359b08501e/FLAGeede70179 [2025-03-17 20:24:34,816 INFO L384 CDTParser]: Found 1 translation units. [2025-03-17 20:24:34,819 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product21.cil.c [2025-03-17 20:24:34,839 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4b69a50b0/81c4e99bdac142a1b1031a359b08501e/FLAGeede70179 [2025-03-17 20:24:35,046 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4b69a50b0/81c4e99bdac142a1b1031a359b08501e [2025-03-17 20:24:35,049 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-03-17 20:24:35,050 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-03-17 20:24:35,051 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-03-17 20:24:35,051 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-03-17 20:24:35,054 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-03-17 20:24:35,054 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:35,056 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@36afc31f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35, skipping insertion in model container [2025-03-17 20:24:35,056 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:35,098 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-03-17 20:24:35,493 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-17 20:24:35,514 INFO L200 MainTranslator]: Completed pre-run [2025-03-17 20:24:35,520 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [48] [2025-03-17 20:24:35,521 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [1575] [2025-03-17 20:24:35,521 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [1934] [2025-03-17 20:24:35,522 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2300] [2025-03-17 20:24:35,522 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [2391] [2025-03-17 20:24:35,522 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2404] [2025-03-17 20:24:35,522 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [2439] [2025-03-17 20:24:35,523 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [3105] [2025-03-17 20:24:35,523 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [3114] [2025-03-17 20:24:35,523 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [3232] [2025-03-17 20:24:35,608 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-17 20:24:35,639 INFO L204 MainTranslator]: Completed translation [2025-03-17 20:24:35,641 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35 WrapperNode [2025-03-17 20:24:35,641 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-03-17 20:24:35,642 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-03-17 20:24:35,642 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-03-17 20:24:35,642 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-03-17 20:24:35,647 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:35,669 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:35,877 INFO L138 Inliner]: procedures = 92, calls = 341, calls flagged for inlining = 194, calls inlined = 385, statements flattened = 13049 [2025-03-17 20:24:35,878 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-03-17 20:24:35,878 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-03-17 20:24:35,879 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-03-17 20:24:35,879 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-03-17 20:24:35,885 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:35,885 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:35,910 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:35,971 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2025-03-17 20:24:35,971 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:35,972 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:36,031 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:36,043 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:36,059 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:36,075 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:36,098 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-03-17 20:24:36,100 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-03-17 20:24:36,100 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-03-17 20:24:36,100 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-03-17 20:24:36,101 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (1/1) ... [2025-03-17 20:24:36,105 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:24:36,116 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:24:36,130 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:24:36,133 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2025-03-17 20:24:36,152 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-03-17 20:24:36,152 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-03-17 20:24:36,152 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-03-17 20:24:36,152 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-03-17 20:24:36,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-03-17 20:24:36,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-03-17 20:24:36,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-03-17 20:24:36,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2025-03-17 20:24:36,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2025-03-17 20:24:36,154 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-03-17 20:24:36,154 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-03-17 20:24:36,314 INFO L256 CfgBuilder]: Building ICFG [2025-03-17 20:24:36,315 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2025-03-17 20:24:41,233 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-1: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,234 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-3: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,234 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-5: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,234 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-7: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,234 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-9: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,234 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-11: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,234 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-13: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,234 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-15: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,235 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-17: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,235 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-19: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,235 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-21: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,235 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-23: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,235 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-25: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,235 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-27: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-29: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-31: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-33: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-35: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-37: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-39: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-41: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-43: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-45: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3151-47: getWeight_#res#1 := getWeight_~retValue_acc~25#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3190-1: getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3190-3: getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-1: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-3: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-5: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-7: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-9: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-11: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-13: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-15: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-17: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-19: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-21: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-23: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-25: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-27: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-29: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-31: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-33: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-35: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-37: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-39: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-41: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-43: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-45: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3229-47: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L138-1: isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-1: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-3: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-5: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-7: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-9: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-11: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-13: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-15: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-17: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-19: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-21: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2791-23: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~23#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L291-1: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L291-3: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L291-5: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L291-7: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-1: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-3: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-5: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-7: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-9: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-11: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-13: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-15: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-1: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-17: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-3: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-19: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-5: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-21: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-7: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L828-23: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-9: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-11: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-13: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-15: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-17: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L300-19: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2436-1: valid_product_#res#1 := valid_product_~retValue_acc~21#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L334-1: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L334-3: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; [2025-03-17 20:24:41,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L334-5: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; [2025-03-17 20:24:41,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L334-7: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; [2025-03-17 20:24:41,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L867-1: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; [2025-03-17 20:24:41,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L867-3: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; [2025-03-17 20:24:41,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L867-5: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; [2025-03-17 20:24:41,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L867-7: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; [2025-03-17 20:24:41,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1931-1: main_#res#1 := main_~retValue_acc~16#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L901-1: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L901-3: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L901-5: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L901-7: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L957-1: stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L957-3: stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-1: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-3: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-5: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-7: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-9: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-11: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-13: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-15: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-17: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-19: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-21: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-23: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-25: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-27: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-29: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-31: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-33: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-35: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-37: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-39: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-41: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-43: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-45: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-47: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-49: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-51: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-53: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-55: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-57: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-59: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-61: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-63: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-65: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-67: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-69: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-71: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-73: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-75: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-77: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-79: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,247 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-81: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,247 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-83: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,247 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-85: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,247 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-87: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,247 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-89: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,247 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-91: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,247 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-93: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-95: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-97: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-99: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-101: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-103: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-105: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-107: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-109: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-111: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-113: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-115: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-117: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-119: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-121: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-123: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-125: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-127: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-129: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-131: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-133: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-135: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-137: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-139: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-141: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-143: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-145: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-147: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-149: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-151: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-153: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-155: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-157: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-159: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-161: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-163: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-165: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-167: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-169: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-171: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-173: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-175: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-177: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-179: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-181: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-183: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-185: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-187: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-189: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-191: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-193: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-195: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-197: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-199: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-201: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-203: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-205: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-207: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-209: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-211: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-213: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-215: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-217: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-219: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-221: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-223: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-225: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-227: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-229: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-231: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-233: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-235: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-237: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-239: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-241: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-243: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-245: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-247: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-249: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-251: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2550-253: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L985-1: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L985-3: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-1: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-3: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-5: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-7: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-9: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-11: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-13: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-15: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-17: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-19: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-21: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-23: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-25: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-27: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-29: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-31: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-33: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3102-35: isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L463-1: anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L999-1: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L999-3: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L999-5: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L999-7: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; [2025-03-17 20:24:41,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L476-1: isIdle_#res#1 := isIdle_~retValue_acc~7#1; [2025-03-17 20:24:41,892 INFO L? ?]: Removed 5745 outVars from TransFormulas that were not future-live. [2025-03-17 20:24:41,892 INFO L307 CfgBuilder]: Performing block encoding [2025-03-17 20:24:41,959 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-03-17 20:24:41,959 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2025-03-17 20:24:41,960 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.03 08:24:41 BoogieIcfgContainer [2025-03-17 20:24:41,960 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-03-17 20:24:41,961 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2025-03-17 20:24:41,961 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2025-03-17 20:24:41,965 INFO L274 PluginConnector]: BuchiAutomizer initialized [2025-03-17 20:24:41,965 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:24:41,966 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 17.03 08:24:35" (1/3) ... [2025-03-17 20:24:41,966 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5aac2f2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.03 08:24:41, skipping insertion in model container [2025-03-17 20:24:41,966 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:24:41,966 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:35" (2/3) ... [2025-03-17 20:24:41,966 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5aac2f2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.03 08:24:41, skipping insertion in model container [2025-03-17 20:24:41,966 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:24:41,966 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.03 08:24:41" (3/3) ... [2025-03-17 20:24:41,967 INFO L363 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product21.cil.c [2025-03-17 20:24:42,100 INFO L306 stractBuchiCegarLoop]: Interprodecural is true [2025-03-17 20:24:42,100 INFO L307 stractBuchiCegarLoop]: Hoare is None [2025-03-17 20:24:42,101 INFO L308 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2025-03-17 20:24:42,101 INFO L309 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2025-03-17 20:24:42,101 INFO L310 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2025-03-17 20:24:42,101 INFO L311 stractBuchiCegarLoop]: Difference is false [2025-03-17 20:24:42,101 INFO L312 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2025-03-17 20:24:42,101 INFO L316 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2025-03-17 20:24:42,116 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3453 states, 3452 states have (on average 1.8925260718424102) internal successors, (6533), 3452 states have internal predecessors, (6533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:42,214 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1688 [2025-03-17 20:24:42,215 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:42,215 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:42,229 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:42,229 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:42,229 INFO L338 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2025-03-17 20:24:42,239 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3453 states, 3452 states have (on average 1.8925260718424102) internal successors, (6533), 3452 states have internal predecessors, (6533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:42,284 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1688 [2025-03-17 20:24:42,284 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:42,284 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:42,287 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:42,287 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:42,298 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:42,299 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:42,304 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:42,304 INFO L85 PathProgramCache]: Analyzing trace with hash -506462668, now seen corresponding path program 1 times [2025-03-17 20:24:42,309 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:42,309 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1553492594] [2025-03-17 20:24:42,310 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:42,310 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:42,380 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 48 statements into 1 equivalence classes. [2025-03-17 20:24:42,427 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 48 of 48 statements. [2025-03-17 20:24:42,427 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:42,427 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:42,621 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:42,622 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:42,622 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1553492594] [2025-03-17 20:24:42,623 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1553492594] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:42,623 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:42,623 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:42,624 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1606914588] [2025-03-17 20:24:42,625 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:42,627 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:42,628 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:42,628 INFO L85 PathProgramCache]: Analyzing trace with hash 1936810800, now seen corresponding path program 1 times [2025-03-17 20:24:42,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:42,628 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [488549965] [2025-03-17 20:24:42,628 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:42,628 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:42,643 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 37 statements into 1 equivalence classes. [2025-03-17 20:24:42,656 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 37 of 37 statements. [2025-03-17 20:24:42,656 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:42,656 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:42,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:42,741 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:42,741 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [488549965] [2025-03-17 20:24:42,741 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [488549965] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:42,741 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:42,741 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:42,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1472987826] [2025-03-17 20:24:42,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:42,743 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:42,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:42,766 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:42,767 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:42,776 INFO L87 Difference]: Start difference. First operand has 3453 states, 3452 states have (on average 1.8925260718424102) internal successors, (6533), 3452 states have internal predecessors, (6533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:43,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:43,454 INFO L93 Difference]: Finished difference Result 3471 states and 6545 transitions. [2025-03-17 20:24:43,455 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 3471 states and 6545 transitions. [2025-03-17 20:24:43,479 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1697 [2025-03-17 20:24:43,503 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 3471 states to 3460 states and 6531 transitions. [2025-03-17 20:24:43,504 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 3460 [2025-03-17 20:24:43,510 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 3460 [2025-03-17 20:24:43,511 INFO L73 IsDeterministic]: Start isDeterministic. Operand 3460 states and 6531 transitions. [2025-03-17 20:24:43,525 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:43,526 INFO L218 hiAutomatonCegarLoop]: Abstraction has 3460 states and 6531 transitions. [2025-03-17 20:24:43,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3460 states and 6531 transitions. [2025-03-17 20:24:43,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3460 to 3452. [2025-03-17 20:24:43,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3452 states, 3452 states have (on average 1.8896292004634994) internal successors, (6523), 3451 states have internal predecessors, (6523), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:43,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3452 states to 3452 states and 6523 transitions. [2025-03-17 20:24:43,641 INFO L240 hiAutomatonCegarLoop]: Abstraction has 3452 states and 6523 transitions. [2025-03-17 20:24:43,642 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:24:43,644 INFO L432 stractBuchiCegarLoop]: Abstraction has 3452 states and 6523 transitions. [2025-03-17 20:24:43,644 INFO L338 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2025-03-17 20:24:43,644 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 3452 states and 6523 transitions. [2025-03-17 20:24:43,664 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1693 [2025-03-17 20:24:43,664 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:43,664 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:43,668 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:43,668 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:43,668 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:43,669 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:43,670 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:43,670 INFO L85 PathProgramCache]: Analyzing trace with hash 409195822, now seen corresponding path program 1 times [2025-03-17 20:24:43,670 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:43,670 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2122246666] [2025-03-17 20:24:43,670 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:43,670 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:43,688 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 52 statements into 1 equivalence classes. [2025-03-17 20:24:43,693 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 52 of 52 statements. [2025-03-17 20:24:43,693 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:43,693 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:43,768 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:43,769 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:43,769 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2122246666] [2025-03-17 20:24:43,769 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2122246666] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:43,769 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:43,769 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:43,769 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1003988879] [2025-03-17 20:24:43,769 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:43,769 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:43,770 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:43,770 INFO L85 PathProgramCache]: Analyzing trace with hash -1075585686, now seen corresponding path program 1 times [2025-03-17 20:24:43,770 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:43,770 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1506136706] [2025-03-17 20:24:43,770 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:43,770 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:43,788 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 41 statements into 1 equivalence classes. [2025-03-17 20:24:43,796 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 41 of 41 statements. [2025-03-17 20:24:43,798 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:43,799 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:43,873 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:43,874 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:43,874 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1506136706] [2025-03-17 20:24:43,874 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1506136706] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:43,874 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:43,874 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:43,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1061456532] [2025-03-17 20:24:43,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:43,875 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:43,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:43,875 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:43,875 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:43,876 INFO L87 Difference]: Start difference. First operand 3452 states and 6523 transitions. cyclomatic complexity: 3072 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:44,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:44,822 INFO L93 Difference]: Finished difference Result 4309 states and 7971 transitions. [2025-03-17 20:24:44,822 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4309 states and 7971 transitions. [2025-03-17 20:24:44,850 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2955 [2025-03-17 20:24:44,871 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4309 states to 4309 states and 7971 transitions. [2025-03-17 20:24:44,872 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4309 [2025-03-17 20:24:44,876 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4309 [2025-03-17 20:24:44,876 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4309 states and 7971 transitions. [2025-03-17 20:24:44,883 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:44,883 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4309 states and 7971 transitions. [2025-03-17 20:24:44,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4309 states and 7971 transitions. [2025-03-17 20:24:44,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4309 to 4300. [2025-03-17 20:24:44,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4300 states, 4300 states have (on average 1.850232558139535) internal successors, (7956), 4299 states have internal predecessors, (7956), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:45,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4300 states to 4300 states and 7956 transitions. [2025-03-17 20:24:45,008 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4300 states and 7956 transitions. [2025-03-17 20:24:45,008 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:24:45,008 INFO L432 stractBuchiCegarLoop]: Abstraction has 4300 states and 7956 transitions. [2025-03-17 20:24:45,008 INFO L338 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2025-03-17 20:24:45,008 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4300 states and 7956 transitions. [2025-03-17 20:24:45,026 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2946 [2025-03-17 20:24:45,027 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:45,027 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:45,030 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:45,030 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:45,031 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:45,031 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret29#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~2#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~2#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret29#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:45,033 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:45,033 INFO L85 PathProgramCache]: Analyzing trace with hash -921179717, now seen corresponding path program 1 times [2025-03-17 20:24:45,033 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:45,033 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1225685905] [2025-03-17 20:24:45,033 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:45,033 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:45,055 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:24:45,059 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:24:45,061 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:45,061 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:45,135 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:45,135 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:45,135 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1225685905] [2025-03-17 20:24:45,135 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1225685905] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:45,135 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:45,135 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:45,136 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2025094510] [2025-03-17 20:24:45,136 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:45,136 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:45,137 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:45,137 INFO L85 PathProgramCache]: Analyzing trace with hash 272411648, now seen corresponding path program 1 times [2025-03-17 20:24:45,137 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:45,137 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1878408063] [2025-03-17 20:24:45,137 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:45,137 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:45,149 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 42 statements into 1 equivalence classes. [2025-03-17 20:24:45,152 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 42 of 42 statements. [2025-03-17 20:24:45,152 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:45,152 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:45,212 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:45,213 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:45,213 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1878408063] [2025-03-17 20:24:45,213 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1878408063] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:45,213 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:45,213 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:24:45,213 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1319267301] [2025-03-17 20:24:45,213 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:45,214 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:45,214 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:45,214 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-17 20:24:45,214 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2025-03-17 20:24:45,214 INFO L87 Difference]: Start difference. First operand 4300 states and 7956 transitions. cyclomatic complexity: 3657 Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 7 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:45,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:45,343 INFO L93 Difference]: Finished difference Result 4309 states and 7965 transitions. [2025-03-17 20:24:45,344 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4309 states and 7965 transitions. [2025-03-17 20:24:45,366 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2952 [2025-03-17 20:24:45,392 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4309 states to 4309 states and 7965 transitions. [2025-03-17 20:24:45,393 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4309 [2025-03-17 20:24:45,397 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4309 [2025-03-17 20:24:45,398 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4309 states and 7965 transitions. [2025-03-17 20:24:45,406 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:45,407 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4309 states and 7965 transitions. [2025-03-17 20:24:45,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4309 states and 7965 transitions. [2025-03-17 20:24:45,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4309 to 4309. [2025-03-17 20:24:45,484 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4309 states, 4309 states have (on average 1.8484567184961709) internal successors, (7965), 4308 states have internal predecessors, (7965), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:45,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4309 states to 4309 states and 7965 transitions. [2025-03-17 20:24:45,502 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4309 states and 7965 transitions. [2025-03-17 20:24:45,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:24:45,503 INFO L432 stractBuchiCegarLoop]: Abstraction has 4309 states and 7965 transitions. [2025-03-17 20:24:45,503 INFO L338 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2025-03-17 20:24:45,503 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4309 states and 7965 transitions. [2025-03-17 20:24:45,522 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2952 [2025-03-17 20:24:45,522 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:45,522 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:45,528 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:45,529 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:45,530 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:45,530 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:45,531 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:45,531 INFO L85 PathProgramCache]: Analyzing trace with hash -921179717, now seen corresponding path program 2 times [2025-03-17 20:24:45,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:45,531 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [959002756] [2025-03-17 20:24:45,531 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:24:45,531 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:45,548 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:24:45,556 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:24:45,556 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:24:45,556 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:45,624 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:45,625 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:45,625 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [959002756] [2025-03-17 20:24:45,625 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [959002756] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:45,625 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:45,625 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:45,625 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [120805455] [2025-03-17 20:24:45,625 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:45,625 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:45,626 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:45,626 INFO L85 PathProgramCache]: Analyzing trace with hash -1169670639, now seen corresponding path program 1 times [2025-03-17 20:24:45,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:45,626 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [330968027] [2025-03-17 20:24:45,626 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:45,626 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:45,705 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 42 statements into 1 equivalence classes. [2025-03-17 20:24:45,707 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 42 of 42 statements. [2025-03-17 20:24:45,707 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:45,707 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:45,774 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:45,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:45,774 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [330968027] [2025-03-17 20:24:45,775 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [330968027] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:45,775 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:45,775 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:45,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1873395944] [2025-03-17 20:24:45,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:45,775 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:45,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:45,775 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:45,775 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:45,776 INFO L87 Difference]: Start difference. First operand 4309 states and 7965 transitions. cyclomatic complexity: 3657 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:46,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:46,509 INFO L93 Difference]: Finished difference Result 6609 states and 12115 transitions. [2025-03-17 20:24:46,509 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 6609 states and 12115 transitions. [2025-03-17 20:24:46,535 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5226 [2025-03-17 20:24:46,570 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 6609 states to 6583 states and 12089 transitions. [2025-03-17 20:24:46,570 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 6583 [2025-03-17 20:24:46,577 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 6583 [2025-03-17 20:24:46,577 INFO L73 IsDeterministic]: Start isDeterministic. Operand 6583 states and 12089 transitions. [2025-03-17 20:24:46,587 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:46,588 INFO L218 hiAutomatonCegarLoop]: Abstraction has 6583 states and 12089 transitions. [2025-03-17 20:24:46,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6583 states and 12089 transitions. [2025-03-17 20:24:46,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6583 to 6574. [2025-03-17 20:24:46,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6574 states, 6574 states have (on average 1.8366291451171282) internal successors, (12074), 6573 states have internal predecessors, (12074), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:46,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6574 states to 6574 states and 12074 transitions. [2025-03-17 20:24:46,691 INFO L240 hiAutomatonCegarLoop]: Abstraction has 6574 states and 12074 transitions. [2025-03-17 20:24:46,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:24:46,693 INFO L432 stractBuchiCegarLoop]: Abstraction has 6574 states and 12074 transitions. [2025-03-17 20:24:46,693 INFO L338 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2025-03-17 20:24:46,693 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6574 states and 12074 transitions. [2025-03-17 20:24:46,710 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5217 [2025-03-17 20:24:46,710 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:46,710 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:46,714 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:46,714 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:46,715 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:46,715 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:46,716 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:46,716 INFO L85 PathProgramCache]: Analyzing trace with hash -921179717, now seen corresponding path program 3 times [2025-03-17 20:24:46,716 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:46,716 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1868685223] [2025-03-17 20:24:46,716 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:24:46,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:46,734 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:24:46,739 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:24:46,740 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:24:46,740 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:46,820 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:46,820 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:46,820 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1868685223] [2025-03-17 20:24:46,820 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1868685223] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:46,820 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:46,820 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:46,820 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1574505586] [2025-03-17 20:24:46,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:46,820 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:46,821 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:46,821 INFO L85 PathProgramCache]: Analyzing trace with hash 1449563046, now seen corresponding path program 1 times [2025-03-17 20:24:46,821 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:46,821 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2116034033] [2025-03-17 20:24:46,821 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:46,821 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:46,832 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:24:46,836 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:24:46,836 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:46,837 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:46,880 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:46,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:46,880 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2116034033] [2025-03-17 20:24:46,881 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2116034033] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:46,881 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:46,881 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:46,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296351053] [2025-03-17 20:24:46,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:46,881 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:46,881 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:46,882 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:46,882 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:46,882 INFO L87 Difference]: Start difference. First operand 6574 states and 12074 transitions. cyclomatic complexity: 5501 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:47,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:47,226 INFO L93 Difference]: Finished difference Result 6840 states and 12388 transitions. [2025-03-17 20:24:47,226 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 6840 states and 12388 transitions. [2025-03-17 20:24:47,251 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5442 [2025-03-17 20:24:47,277 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 6840 states to 6840 states and 12388 transitions. [2025-03-17 20:24:47,278 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 6840 [2025-03-17 20:24:47,285 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 6840 [2025-03-17 20:24:47,285 INFO L73 IsDeterministic]: Start isDeterministic. Operand 6840 states and 12388 transitions. [2025-03-17 20:24:47,296 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:47,297 INFO L218 hiAutomatonCegarLoop]: Abstraction has 6840 states and 12388 transitions. [2025-03-17 20:24:47,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6840 states and 12388 transitions. [2025-03-17 20:24:47,370 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6840 to 6734. [2025-03-17 20:24:47,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6734 states, 6734 states have (on average 1.8179388179388178) internal successors, (12242), 6733 states have internal predecessors, (12242), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:47,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6734 states to 6734 states and 12242 transitions. [2025-03-17 20:24:47,391 INFO L240 hiAutomatonCegarLoop]: Abstraction has 6734 states and 12242 transitions. [2025-03-17 20:24:47,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-17 20:24:47,392 INFO L432 stractBuchiCegarLoop]: Abstraction has 6734 states and 12242 transitions. [2025-03-17 20:24:47,392 INFO L338 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2025-03-17 20:24:47,392 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6734 states and 12242 transitions. [2025-03-17 20:24:47,408 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5347 [2025-03-17 20:24:47,409 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:47,409 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:47,413 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:47,413 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:47,413 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:47,414 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret18#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret18#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret18#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:47,414 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:47,414 INFO L85 PathProgramCache]: Analyzing trace with hash -921179717, now seen corresponding path program 4 times [2025-03-17 20:24:47,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:47,414 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [370114296] [2025-03-17 20:24:47,415 INFO L95 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2025-03-17 20:24:47,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:47,435 INFO L108 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST partitioned 56 statements into 2 equivalence classes. [2025-03-17 20:24:47,437 INFO L111 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) and asserted 55 of 56 statements. [2025-03-17 20:24:47,437 INFO L114 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) [2025-03-17 20:24:47,437 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:47,462 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:47,462 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:47,463 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [370114296] [2025-03-17 20:24:47,463 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [370114296] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:47,463 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:47,463 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:47,463 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1232488803] [2025-03-17 20:24:47,463 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:47,463 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:47,463 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:47,463 INFO L85 PathProgramCache]: Analyzing trace with hash 318323027, now seen corresponding path program 1 times [2025-03-17 20:24:47,464 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:47,464 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1437449726] [2025-03-17 20:24:47,464 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:47,464 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:47,474 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:24:47,478 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:24:47,479 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:47,479 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:47,565 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:47,565 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:47,565 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1437449726] [2025-03-17 20:24:47,565 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1437449726] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:47,565 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:47,565 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:47,565 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1879685619] [2025-03-17 20:24:47,566 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:47,566 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:47,566 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:47,566 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:47,566 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:47,567 INFO L87 Difference]: Start difference. First operand 6734 states and 12242 transitions. cyclomatic complexity: 5509 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:47,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:47,866 INFO L93 Difference]: Finished difference Result 11465 states and 20896 transitions. [2025-03-17 20:24:47,866 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11465 states and 20896 transitions. [2025-03-17 20:24:47,922 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9836 [2025-03-17 20:24:47,966 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11465 states to 11452 states and 20877 transitions. [2025-03-17 20:24:47,966 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11452 [2025-03-17 20:24:47,980 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11452 [2025-03-17 20:24:47,981 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11452 states and 20877 transitions. [2025-03-17 20:24:47,998 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:47,998 INFO L218 hiAutomatonCegarLoop]: Abstraction has 11452 states and 20877 transitions. [2025-03-17 20:24:48,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11452 states and 20877 transitions. [2025-03-17 20:24:48,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11452 to 11441. [2025-03-17 20:24:48,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11441 states, 11441 states have (on average 1.8234420068175858) internal successors, (20862), 11440 states have internal predecessors, (20862), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:48,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11441 states to 11441 states and 20862 transitions. [2025-03-17 20:24:48,191 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11441 states and 20862 transitions. [2025-03-17 20:24:48,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:24:48,193 INFO L432 stractBuchiCegarLoop]: Abstraction has 11441 states and 20862 transitions. [2025-03-17 20:24:48,193 INFO L338 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2025-03-17 20:24:48,193 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11441 states and 20862 transitions. [2025-03-17 20:24:48,224 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9827 [2025-03-17 20:24:48,224 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:48,224 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:48,230 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:48,231 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:48,231 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:48,233 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:48,233 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:48,233 INFO L85 PathProgramCache]: Analyzing trace with hash 886274746, now seen corresponding path program 1 times [2025-03-17 20:24:48,233 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:48,233 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492521491] [2025-03-17 20:24:48,233 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:48,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:48,248 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:24:48,252 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:24:48,252 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:48,252 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:48,293 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:48,293 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:48,293 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492521491] [2025-03-17 20:24:48,293 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492521491] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:48,293 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:48,293 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:48,294 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2002785265] [2025-03-17 20:24:48,294 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:48,294 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:48,294 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:48,294 INFO L85 PathProgramCache]: Analyzing trace with hash 1560918127, now seen corresponding path program 1 times [2025-03-17 20:24:48,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:48,294 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [339125056] [2025-03-17 20:24:48,294 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:48,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:48,305 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:24:48,308 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:24:48,308 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:48,308 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:48,368 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:48,368 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:48,368 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [339125056] [2025-03-17 20:24:48,368 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [339125056] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:48,368 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:48,368 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:48,368 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [994611083] [2025-03-17 20:24:48,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:48,369 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:48,369 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:48,369 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:48,369 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:48,369 INFO L87 Difference]: Start difference. First operand 11441 states and 20862 transitions. cyclomatic complexity: 9423 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:49,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:49,091 INFO L93 Difference]: Finished difference Result 19720 states and 35983 transitions. [2025-03-17 20:24:49,092 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19720 states and 35983 transitions. [2025-03-17 20:24:49,177 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 18013 [2025-03-17 20:24:49,240 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19720 states to 19627 states and 35872 transitions. [2025-03-17 20:24:49,240 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19627 [2025-03-17 20:24:49,265 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19627 [2025-03-17 20:24:49,266 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19627 states and 35872 transitions. [2025-03-17 20:24:49,285 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:49,286 INFO L218 hiAutomatonCegarLoop]: Abstraction has 19627 states and 35872 transitions. [2025-03-17 20:24:49,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19627 states and 35872 transitions. [2025-03-17 20:24:49,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19627 to 15705. [2025-03-17 20:24:49,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15705 states, 15705 states have (on average 1.8247055078000636) internal successors, (28657), 15704 states have internal predecessors, (28657), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:49,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15705 states to 15705 states and 28657 transitions. [2025-03-17 20:24:49,508 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15705 states and 28657 transitions. [2025-03-17 20:24:49,509 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:24:49,510 INFO L432 stractBuchiCegarLoop]: Abstraction has 15705 states and 28657 transitions. [2025-03-17 20:24:49,510 INFO L338 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2025-03-17 20:24:49,510 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15705 states and 28657 transitions. [2025-03-17 20:24:49,555 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 14091 [2025-03-17 20:24:49,556 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:49,556 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:49,561 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:49,561 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:49,562 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:49,562 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume 3 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_3~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:49,562 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:49,563 INFO L85 PathProgramCache]: Analyzing trace with hash 886274746, now seen corresponding path program 2 times [2025-03-17 20:24:49,563 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:49,563 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [38698669] [2025-03-17 20:24:49,563 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:24:49,563 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:49,579 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:24:49,582 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:24:49,582 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:24:49,582 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:49,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:49,619 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:49,619 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [38698669] [2025-03-17 20:24:49,619 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [38698669] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:49,619 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:49,619 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:49,619 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [220978312] [2025-03-17 20:24:49,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:49,620 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:49,620 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:49,620 INFO L85 PathProgramCache]: Analyzing trace with hash 1662078966, now seen corresponding path program 1 times [2025-03-17 20:24:49,620 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:49,620 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1768586508] [2025-03-17 20:24:49,620 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:49,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:49,629 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 44 statements into 1 equivalence classes. [2025-03-17 20:24:49,633 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 44 of 44 statements. [2025-03-17 20:24:49,633 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:49,633 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:49,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:49,694 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:49,694 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1768586508] [2025-03-17 20:24:49,694 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1768586508] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:49,694 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:49,694 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:49,695 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1329953872] [2025-03-17 20:24:49,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:49,695 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:49,695 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:49,696 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:49,696 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:49,696 INFO L87 Difference]: Start difference. First operand 15705 states and 28657 transitions. cyclomatic complexity: 12954 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:50,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:50,528 INFO L93 Difference]: Finished difference Result 28155 states and 51409 transitions. [2025-03-17 20:24:50,528 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28155 states and 51409 transitions. [2025-03-17 20:24:50,645 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26376 [2025-03-17 20:24:50,745 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28155 states to 27990 states and 51217 transitions. [2025-03-17 20:24:50,745 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27990 [2025-03-17 20:24:50,776 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27990 [2025-03-17 20:24:50,776 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27990 states and 51217 transitions. [2025-03-17 20:24:50,801 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:50,801 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27990 states and 51217 transitions. [2025-03-17 20:24:50,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27990 states and 51217 transitions. [2025-03-17 20:24:51,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27990 to 20174. [2025-03-17 20:24:51,029 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20174 states, 20174 states have (on average 1.823733518390007) internal successors, (36792), 20173 states have internal predecessors, (36792), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:51,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20174 states to 20174 states and 36792 transitions. [2025-03-17 20:24:51,058 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20174 states and 36792 transitions. [2025-03-17 20:24:51,058 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:24:51,061 INFO L432 stractBuchiCegarLoop]: Abstraction has 20174 states and 36792 transitions. [2025-03-17 20:24:51,061 INFO L338 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2025-03-17 20:24:51,061 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20174 states and 36792 transitions. [2025-03-17 20:24:51,150 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 18560 [2025-03-17 20:24:51,151 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:51,151 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:51,157 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:51,157 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:51,158 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:51,158 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume 4 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_4~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:51,158 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:51,159 INFO L85 PathProgramCache]: Analyzing trace with hash 886274746, now seen corresponding path program 3 times [2025-03-17 20:24:51,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:51,159 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1110612837] [2025-03-17 20:24:51,159 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:24:51,159 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:51,174 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:24:51,177 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:24:51,178 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:24:51,178 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:51,211 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:51,211 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:51,211 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1110612837] [2025-03-17 20:24:51,211 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1110612837] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:51,212 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:51,212 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:51,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1405825938] [2025-03-17 20:24:51,212 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:51,212 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:51,212 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:51,212 INFO L85 PathProgramCache]: Analyzing trace with hash 1855352692, now seen corresponding path program 1 times [2025-03-17 20:24:51,212 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:51,212 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [633460564] [2025-03-17 20:24:51,213 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:51,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:51,222 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:24:51,226 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:24:51,227 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:51,227 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:51,282 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:51,283 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:51,283 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [633460564] [2025-03-17 20:24:51,283 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [633460564] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:51,283 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:51,283 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:51,283 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1672033861] [2025-03-17 20:24:51,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:51,283 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:51,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:51,284 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:51,284 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:51,284 INFO L87 Difference]: Start difference. First operand 20174 states and 36792 transitions. cyclomatic complexity: 16620 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:52,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:52,012 INFO L93 Difference]: Finished difference Result 37053 states and 67597 transitions. [2025-03-17 20:24:52,012 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37053 states and 67597 transitions. [2025-03-17 20:24:52,152 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35184 [2025-03-17 20:24:52,443 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37053 states to 36798 states and 67306 transitions. [2025-03-17 20:24:52,444 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 36798 [2025-03-17 20:24:52,479 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 36798 [2025-03-17 20:24:52,480 INFO L73 IsDeterministic]: Start isDeterministic. Operand 36798 states and 67306 transitions. [2025-03-17 20:24:52,517 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:52,517 INFO L218 hiAutomatonCegarLoop]: Abstraction has 36798 states and 67306 transitions. [2025-03-17 20:24:52,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36798 states and 67306 transitions. [2025-03-17 20:24:52,852 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36798 to 24860. [2025-03-17 20:24:52,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24860 states, 24860 states have (on average 1.821399839098954) internal successors, (45280), 24859 states have internal predecessors, (45280), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:52,934 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24860 states to 24860 states and 45280 transitions. [2025-03-17 20:24:52,935 INFO L240 hiAutomatonCegarLoop]: Abstraction has 24860 states and 45280 transitions. [2025-03-17 20:24:52,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:24:52,938 INFO L432 stractBuchiCegarLoop]: Abstraction has 24860 states and 45280 transitions. [2025-03-17 20:24:52,938 INFO L338 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2025-03-17 20:24:52,938 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24860 states and 45280 transitions. [2025-03-17 20:24:53,021 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 23246 [2025-03-17 20:24:53,021 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:53,021 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:53,029 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:53,030 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:53,030 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:53,031 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:53,032 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:53,032 INFO L85 PathProgramCache]: Analyzing trace with hash 886274746, now seen corresponding path program 4 times [2025-03-17 20:24:53,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:53,032 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [201053373] [2025-03-17 20:24:53,032 INFO L95 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2025-03-17 20:24:53,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:53,050 INFO L108 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST partitioned 56 statements into 2 equivalence classes. [2025-03-17 20:24:53,051 INFO L111 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) and asserted 55 of 56 statements. [2025-03-17 20:24:53,051 INFO L114 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) [2025-03-17 20:24:53,051 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:53,081 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:53,081 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:53,082 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [201053373] [2025-03-17 20:24:53,082 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [201053373] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:53,082 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:53,082 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:53,082 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [568976723] [2025-03-17 20:24:53,082 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:53,082 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:53,082 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:53,082 INFO L85 PathProgramCache]: Analyzing trace with hash -1053411210, now seen corresponding path program 1 times [2025-03-17 20:24:53,083 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:53,083 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [658189957] [2025-03-17 20:24:53,083 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:53,083 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:53,093 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:24:53,095 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:24:53,095 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:53,095 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:53,106 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:53,106 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:53,106 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [658189957] [2025-03-17 20:24:53,106 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [658189957] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:53,106 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:53,106 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:53,106 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1587192273] [2025-03-17 20:24:53,106 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:53,107 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:53,107 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:53,107 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:24:53,107 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:24:53,107 INFO L87 Difference]: Start difference. First operand 24860 states and 45280 transitions. cyclomatic complexity: 20422 Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:53,680 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:53,680 INFO L93 Difference]: Finished difference Result 35531 states and 65022 transitions. [2025-03-17 20:24:53,680 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 35531 states and 65022 transitions. [2025-03-17 20:24:53,981 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 33756 [2025-03-17 20:24:54,067 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 35531 states to 35398 states and 64847 transitions. [2025-03-17 20:24:54,067 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 35398 [2025-03-17 20:24:54,096 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 35398 [2025-03-17 20:24:54,097 INFO L73 IsDeterministic]: Start isDeterministic. Operand 35398 states and 64847 transitions. [2025-03-17 20:24:54,118 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:54,118 INFO L218 hiAutomatonCegarLoop]: Abstraction has 35398 states and 64847 transitions. [2025-03-17 20:24:54,142 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35398 states and 64847 transitions. [2025-03-17 20:24:54,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35398 to 28178. [2025-03-17 20:24:54,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28178 states, 28178 states have (on average 1.820640215771169) internal successors, (51302), 28177 states have internal predecessors, (51302), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:54,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28178 states to 28178 states and 51302 transitions. [2025-03-17 20:24:54,446 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28178 states and 51302 transitions. [2025-03-17 20:24:54,450 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:24:54,451 INFO L432 stractBuchiCegarLoop]: Abstraction has 28178 states and 51302 transitions. [2025-03-17 20:24:54,451 INFO L338 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2025-03-17 20:24:54,451 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28178 states and 51302 transitions. [2025-03-17 20:24:54,530 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26545 [2025-03-17 20:24:54,531 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:54,531 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:54,539 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:54,539 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:54,539 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:54,540 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:54,540 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:54,540 INFO L85 PathProgramCache]: Analyzing trace with hash 886274746, now seen corresponding path program 5 times [2025-03-17 20:24:54,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:54,541 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [56501119] [2025-03-17 20:24:54,541 INFO L95 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2025-03-17 20:24:54,541 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:54,555 INFO L108 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:24:54,559 INFO L111 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:24:54,559 INFO L114 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:24:54,559 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:54,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:54,736 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:54,736 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [56501119] [2025-03-17 20:24:54,736 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [56501119] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:54,736 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:54,736 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:54,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [53201370] [2025-03-17 20:24:54,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:54,736 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:54,737 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:54,737 INFO L85 PathProgramCache]: Analyzing trace with hash 1480353366, now seen corresponding path program 1 times [2025-03-17 20:24:54,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:54,737 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [977100722] [2025-03-17 20:24:54,737 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:54,737 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:54,748 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:24:54,750 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:24:54,751 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:54,751 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:54,792 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:54,792 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:54,792 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [977100722] [2025-03-17 20:24:54,793 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [977100722] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:54,793 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:54,793 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:24:54,793 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [800964127] [2025-03-17 20:24:54,793 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:54,793 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:54,793 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:54,794 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:24:54,794 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:24:54,794 INFO L87 Difference]: Start difference. First operand 28178 states and 51302 transitions. cyclomatic complexity: 23128 Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:55,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:55,950 INFO L93 Difference]: Finished difference Result 28201 states and 50945 transitions. [2025-03-17 20:24:55,951 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28201 states and 50945 transitions. [2025-03-17 20:24:56,154 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26568 [2025-03-17 20:24:56,237 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28201 states to 28201 states and 50945 transitions. [2025-03-17 20:24:56,237 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28201 [2025-03-17 20:24:56,285 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28201 [2025-03-17 20:24:56,290 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28201 states and 50945 transitions. [2025-03-17 20:24:56,314 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:56,315 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28201 states and 50945 transitions. [2025-03-17 20:24:56,335 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28201 states and 50945 transitions. [2025-03-17 20:24:56,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28201 to 28178. [2025-03-17 20:24:56,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28178 states, 28178 states have (on average 1.8071545177088508) internal successors, (50922), 28177 states have internal predecessors, (50922), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:56,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28178 states to 28178 states and 50922 transitions. [2025-03-17 20:24:56,992 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28178 states and 50922 transitions. [2025-03-17 20:24:56,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:24:56,993 INFO L432 stractBuchiCegarLoop]: Abstraction has 28178 states and 50922 transitions. [2025-03-17 20:24:56,993 INFO L338 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2025-03-17 20:24:56,993 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28178 states and 50922 transitions. [2025-03-17 20:24:57,063 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26545 [2025-03-17 20:24:57,063 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:57,063 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:57,070 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:57,070 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:57,070 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:57,070 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:57,072 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:57,072 INFO L85 PathProgramCache]: Analyzing trace with hash 410563821, now seen corresponding path program 1 times [2025-03-17 20:24:57,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:57,073 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1101877365] [2025-03-17 20:24:57,073 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:57,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:57,090 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 57 statements into 1 equivalence classes. [2025-03-17 20:24:57,093 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 57 of 57 statements. [2025-03-17 20:24:57,093 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:57,093 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:57,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:57,129 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:57,129 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1101877365] [2025-03-17 20:24:57,129 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1101877365] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:57,129 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:57,129 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:57,130 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1390178299] [2025-03-17 20:24:57,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:57,130 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:57,131 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:57,131 INFO L85 PathProgramCache]: Analyzing trace with hash -1073275595, now seen corresponding path program 1 times [2025-03-17 20:24:57,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:57,131 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [403539983] [2025-03-17 20:24:57,131 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:57,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:57,140 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:24:57,142 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:24:57,145 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:57,145 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:57,158 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:57,158 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:57,158 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [403539983] [2025-03-17 20:24:57,159 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [403539983] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:57,159 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:57,159 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:57,159 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428356236] [2025-03-17 20:24:57,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:57,159 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:57,159 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:57,160 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:24:57,160 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:24:57,160 INFO L87 Difference]: Start difference. First operand 28178 states and 50922 transitions. cyclomatic complexity: 22748 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:57,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:57,854 INFO L93 Difference]: Finished difference Result 38413 states and 69629 transitions. [2025-03-17 20:24:57,854 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38413 states and 69629 transitions. [2025-03-17 20:24:58,031 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36780 [2025-03-17 20:24:58,150 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38413 states to 38413 states and 69629 transitions. [2025-03-17 20:24:58,150 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38413 [2025-03-17 20:24:58,185 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38413 [2025-03-17 20:24:58,185 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38413 states and 69629 transitions. [2025-03-17 20:24:58,215 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:58,216 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38413 states and 69629 transitions. [2025-03-17 20:24:58,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38413 states and 69629 transitions. [2025-03-17 20:24:58,589 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38413 to 38278. [2025-03-17 20:24:58,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38278 states, 38278 states have (on average 1.8153769789435186) internal successors, (69489), 38277 states have internal predecessors, (69489), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:58,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38278 states to 38278 states and 69489 transitions. [2025-03-17 20:24:58,909 INFO L240 hiAutomatonCegarLoop]: Abstraction has 38278 states and 69489 transitions. [2025-03-17 20:24:58,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:24:58,909 INFO L432 stractBuchiCegarLoop]: Abstraction has 38278 states and 69489 transitions. [2025-03-17 20:24:58,909 INFO L338 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2025-03-17 20:24:58,910 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38278 states and 69489 transitions. [2025-03-17 20:24:58,991 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36645 [2025-03-17 20:24:58,991 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:58,991 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:58,998 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:58,998 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:58,998 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:24:58,999 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret24#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:24:58,999 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:58,999 INFO L85 PathProgramCache]: Analyzing trace with hash 410563821, now seen corresponding path program 2 times [2025-03-17 20:24:58,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:58,999 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602946358] [2025-03-17 20:24:58,999 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:24:58,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:59,012 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 57 statements into 1 equivalence classes. [2025-03-17 20:24:59,015 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 57 of 57 statements. [2025-03-17 20:24:59,015 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:24:59,015 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:59,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:59,043 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:59,043 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602946358] [2025-03-17 20:24:59,043 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602946358] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:59,044 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:59,044 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:59,044 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [865071048] [2025-03-17 20:24:59,044 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:59,044 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:59,044 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:59,044 INFO L85 PathProgramCache]: Analyzing trace with hash -1820164287, now seen corresponding path program 1 times [2025-03-17 20:24:59,044 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:59,044 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [104301769] [2025-03-17 20:24:59,044 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:59,045 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:59,053 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:24:59,056 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:24:59,056 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:59,056 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:59,089 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:59,089 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:59,089 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [104301769] [2025-03-17 20:24:59,089 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [104301769] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:59,089 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:59,089 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:59,089 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [851699366] [2025-03-17 20:24:59,089 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:59,090 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:59,090 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:59,090 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:59,090 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:59,090 INFO L87 Difference]: Start difference. First operand 38278 states and 69489 transitions. cyclomatic complexity: 31215 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:59,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:59,535 INFO L93 Difference]: Finished difference Result 38074 states and 69084 transitions. [2025-03-17 20:24:59,535 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38074 states and 69084 transitions. [2025-03-17 20:24:59,682 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36644 [2025-03-17 20:24:59,786 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38074 states to 38074 states and 69084 transitions. [2025-03-17 20:24:59,786 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38074 [2025-03-17 20:24:59,817 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38074 [2025-03-17 20:24:59,817 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38074 states and 69084 transitions. [2025-03-17 20:24:59,842 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:59,842 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38074 states and 69084 transitions. [2025-03-17 20:24:59,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38074 states and 69084 transitions. [2025-03-17 20:25:00,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38074 to 38050. [2025-03-17 20:25:00,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38050 states, 38050 states have (on average 1.8148488830486202) internal successors, (69055), 38049 states have internal predecessors, (69055), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:00,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38050 states to 38050 states and 69055 transitions. [2025-03-17 20:25:00,343 INFO L240 hiAutomatonCegarLoop]: Abstraction has 38050 states and 69055 transitions. [2025-03-17 20:25:00,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:25:00,344 INFO L432 stractBuchiCegarLoop]: Abstraction has 38050 states and 69055 transitions. [2025-03-17 20:25:00,344 INFO L338 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2025-03-17 20:25:00,344 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38050 states and 69055 transitions. [2025-03-17 20:25:00,442 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36620 [2025-03-17 20:25:00,442 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:00,442 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:00,446 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:00,446 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:00,446 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:00,447 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:00,447 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:00,447 INFO L85 PathProgramCache]: Analyzing trace with hash -1335155256, now seen corresponding path program 1 times [2025-03-17 20:25:00,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:00,447 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2037974487] [2025-03-17 20:25:00,447 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:00,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:00,459 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 58 statements into 1 equivalence classes. [2025-03-17 20:25:00,462 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 58 of 58 statements. [2025-03-17 20:25:00,462 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:00,462 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:00,487 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:00,487 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:00,487 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2037974487] [2025-03-17 20:25:00,487 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2037974487] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:00,487 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:00,487 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:00,488 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [237638671] [2025-03-17 20:25:00,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:00,489 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:00,489 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:00,489 INFO L85 PathProgramCache]: Analyzing trace with hash -1691550887, now seen corresponding path program 1 times [2025-03-17 20:25:00,489 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:00,489 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1458054717] [2025-03-17 20:25:00,489 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:00,489 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:00,501 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 50 statements into 1 equivalence classes. [2025-03-17 20:25:00,504 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 50 of 50 statements. [2025-03-17 20:25:00,504 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:00,504 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:00,542 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:00,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:00,543 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1458054717] [2025-03-17 20:25:00,543 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1458054717] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:00,543 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:00,543 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:00,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1946844941] [2025-03-17 20:25:00,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:00,543 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:00,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:00,544 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:00,544 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:00,545 INFO L87 Difference]: Start difference. First operand 38050 states and 69055 transitions. cyclomatic complexity: 31009 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:00,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:00,967 INFO L93 Difference]: Finished difference Result 38482 states and 69732 transitions. [2025-03-17 20:25:00,968 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38482 states and 69732 transitions. [2025-03-17 20:25:01,204 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 37039 [2025-03-17 20:25:01,327 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38482 states to 38482 states and 69732 transitions. [2025-03-17 20:25:01,327 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38482 [2025-03-17 20:25:01,363 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38482 [2025-03-17 20:25:01,363 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38482 states and 69732 transitions. [2025-03-17 20:25:01,392 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:01,392 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38482 states and 69732 transitions. [2025-03-17 20:25:01,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38482 states and 69732 transitions. [2025-03-17 20:25:01,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38482 to 38374. [2025-03-17 20:25:01,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38374 states, 38374 states have (on average 1.8128941470787512) internal successors, (69568), 38373 states have internal predecessors, (69568), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:01,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38374 states to 38374 states and 69568 transitions. [2025-03-17 20:25:01,909 INFO L240 hiAutomatonCegarLoop]: Abstraction has 38374 states and 69568 transitions. [2025-03-17 20:25:01,910 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:25:01,910 INFO L432 stractBuchiCegarLoop]: Abstraction has 38374 states and 69568 transitions. [2025-03-17 20:25:01,910 INFO L338 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2025-03-17 20:25:01,910 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38374 states and 69568 transitions. [2025-03-17 20:25:02,021 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36932 [2025-03-17 20:25:02,021 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:02,021 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:02,025 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:02,026 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:02,026 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:02,026 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:02,029 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:02,029 INFO L85 PathProgramCache]: Analyzing trace with hash -1335155256, now seen corresponding path program 2 times [2025-03-17 20:25:02,029 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:02,029 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [816422601] [2025-03-17 20:25:02,029 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:02,029 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:02,045 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 58 statements into 1 equivalence classes. [2025-03-17 20:25:02,047 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 58 of 58 statements. [2025-03-17 20:25:02,048 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:02,048 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:02,076 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:02,076 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:02,076 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [816422601] [2025-03-17 20:25:02,076 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [816422601] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:02,076 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:02,076 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:02,077 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2002101812] [2025-03-17 20:25:02,077 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:02,077 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:02,077 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:02,077 INFO L85 PathProgramCache]: Analyzing trace with hash -1825564393, now seen corresponding path program 1 times [2025-03-17 20:25:02,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:02,077 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1550188752] [2025-03-17 20:25:02,077 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:02,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:02,087 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 50 statements into 1 equivalence classes. [2025-03-17 20:25:02,090 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 50 of 50 statements. [2025-03-17 20:25:02,090 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:02,090 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:02,119 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:02,120 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:02,120 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1550188752] [2025-03-17 20:25:02,120 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1550188752] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:02,120 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:02,121 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:02,121 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [795186660] [2025-03-17 20:25:02,121 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:02,121 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:02,121 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:02,122 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:02,122 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:02,122 INFO L87 Difference]: Start difference. First operand 38374 states and 69568 transitions. cyclomatic complexity: 31198 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:02,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:02,677 INFO L93 Difference]: Finished difference Result 38409 states and 69586 transitions. [2025-03-17 20:25:02,677 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38409 states and 69586 transitions. [2025-03-17 20:25:02,822 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36962 [2025-03-17 20:25:02,926 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38409 states to 38409 states and 69586 transitions. [2025-03-17 20:25:02,927 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38409 [2025-03-17 20:25:02,957 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38409 [2025-03-17 20:25:02,957 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38409 states and 69586 transitions. [2025-03-17 20:25:02,983 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:02,983 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38409 states and 69586 transitions. [2025-03-17 20:25:03,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38409 states and 69586 transitions. [2025-03-17 20:25:03,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38409 to 38300. [2025-03-17 20:25:03,436 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38300 states, 38300 states have (on average 1.8135770234986945) internal successors, (69460), 38299 states have internal predecessors, (69460), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:03,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38300 states to 38300 states and 69460 transitions. [2025-03-17 20:25:03,498 INFO L240 hiAutomatonCegarLoop]: Abstraction has 38300 states and 69460 transitions. [2025-03-17 20:25:03,499 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:25:03,499 INFO L432 stractBuchiCegarLoop]: Abstraction has 38300 states and 69460 transitions. [2025-03-17 20:25:03,499 INFO L338 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2025-03-17 20:25:03,499 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38300 states and 69460 transitions. [2025-03-17 20:25:03,609 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36853 [2025-03-17 20:25:03,610 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:03,610 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:03,613 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:03,613 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:03,614 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:03,614 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:03,614 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:03,614 INFO L85 PathProgramCache]: Analyzing trace with hash -1335155256, now seen corresponding path program 3 times [2025-03-17 20:25:03,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:03,614 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [822111584] [2025-03-17 20:25:03,614 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:25:03,614 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:03,625 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 58 statements into 1 equivalence classes. [2025-03-17 20:25:03,628 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 58 of 58 statements. [2025-03-17 20:25:03,628 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:25:03,628 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:03,816 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:03,816 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:03,816 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [822111584] [2025-03-17 20:25:03,816 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [822111584] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:03,816 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:03,817 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:03,817 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685628245] [2025-03-17 20:25:03,817 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:03,817 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:03,817 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:03,818 INFO L85 PathProgramCache]: Analyzing trace with hash -316107291, now seen corresponding path program 1 times [2025-03-17 20:25:03,818 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:03,818 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [49601094] [2025-03-17 20:25:03,818 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:03,818 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:03,829 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:25:03,833 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:25:03,834 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:03,834 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:03,942 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:03,942 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:03,942 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [49601094] [2025-03-17 20:25:03,942 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [49601094] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:03,942 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:03,942 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2025-03-17 20:25:03,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1103694399] [2025-03-17 20:25:03,943 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:03,943 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:03,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:03,943 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:25:03,943 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:25:03,943 INFO L87 Difference]: Start difference. First operand 38300 states and 69460 transitions. cyclomatic complexity: 31164 Second operand has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:04,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:04,097 INFO L93 Difference]: Finished difference Result 38300 states and 69454 transitions. [2025-03-17 20:25:04,097 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38300 states and 69454 transitions. [2025-03-17 20:25:04,271 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36853 [2025-03-17 20:25:04,396 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38300 states to 38300 states and 69454 transitions. [2025-03-17 20:25:04,396 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38300 [2025-03-17 20:25:04,433 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38300 [2025-03-17 20:25:04,433 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38300 states and 69454 transitions. [2025-03-17 20:25:04,465 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:04,465 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38300 states and 69454 transitions. [2025-03-17 20:25:04,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38300 states and 69454 transitions. [2025-03-17 20:25:05,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38300 to 38300. [2025-03-17 20:25:05,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38300 states, 38300 states have (on average 1.813420365535248) internal successors, (69454), 38299 states have internal predecessors, (69454), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:05,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38300 states to 38300 states and 69454 transitions. [2025-03-17 20:25:05,132 INFO L240 hiAutomatonCegarLoop]: Abstraction has 38300 states and 69454 transitions. [2025-03-17 20:25:05,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:25:05,133 INFO L432 stractBuchiCegarLoop]: Abstraction has 38300 states and 69454 transitions. [2025-03-17 20:25:05,133 INFO L338 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2025-03-17 20:25:05,133 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38300 states and 69454 transitions. [2025-03-17 20:25:05,234 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36853 [2025-03-17 20:25:05,234 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:05,234 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:05,238 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:05,238 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:05,238 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:05,238 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret24#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:05,238 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:05,239 INFO L85 PathProgramCache]: Analyzing trace with hash -1126264899, now seen corresponding path program 1 times [2025-03-17 20:25:05,239 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:05,239 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1699555264] [2025-03-17 20:25:05,239 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:05,239 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:05,260 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 63 statements into 1 equivalence classes. [2025-03-17 20:25:05,263 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 63 of 63 statements. [2025-03-17 20:25:05,263 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:05,263 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:05,330 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:05,331 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:05,331 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1699555264] [2025-03-17 20:25:05,331 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1699555264] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:05,331 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:05,331 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:05,331 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1523493832] [2025-03-17 20:25:05,331 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:05,331 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:05,332 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:05,332 INFO L85 PathProgramCache]: Analyzing trace with hash -644896644, now seen corresponding path program 1 times [2025-03-17 20:25:05,332 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:05,332 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1085381790] [2025-03-17 20:25:05,332 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:05,332 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:05,342 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:25:05,347 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:25:05,347 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:05,347 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:05,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:05,412 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:05,412 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1085381790] [2025-03-17 20:25:05,412 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1085381790] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:05,412 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:05,412 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:05,412 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [760069693] [2025-03-17 20:25:05,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:05,412 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:05,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:05,413 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-17 20:25:05,413 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2025-03-17 20:25:05,413 INFO L87 Difference]: Start difference. First operand 38300 states and 69454 transitions. cyclomatic complexity: 31158 Second operand has 6 states, 6 states have (on average 9.833333333333334) internal successors, (59), 6 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:05,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:05,649 INFO L93 Difference]: Finished difference Result 38363 states and 69426 transitions. [2025-03-17 20:25:05,649 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38363 states and 69426 transitions. [2025-03-17 20:25:06,008 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36891 [2025-03-17 20:25:06,099 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38363 states to 38339 states and 69392 transitions. [2025-03-17 20:25:06,099 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38339 [2025-03-17 20:25:06,130 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38339 [2025-03-17 20:25:06,131 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38339 states and 69392 transitions. [2025-03-17 20:25:06,154 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:06,154 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38339 states and 69392 transitions. [2025-03-17 20:25:06,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38339 states and 69392 transitions. [2025-03-17 20:25:06,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38339 to 38180. [2025-03-17 20:25:06,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38180 states, 38180 states have (on average 1.811498166579361) internal successors, (69163), 38179 states have internal predecessors, (69163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:06,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38180 states to 38180 states and 69163 transitions. [2025-03-17 20:25:06,530 INFO L240 hiAutomatonCegarLoop]: Abstraction has 38180 states and 69163 transitions. [2025-03-17 20:25:06,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-17 20:25:06,531 INFO L432 stractBuchiCegarLoop]: Abstraction has 38180 states and 69163 transitions. [2025-03-17 20:25:06,531 INFO L338 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2025-03-17 20:25:06,531 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38180 states and 69163 transitions. [2025-03-17 20:25:06,661 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 36733 [2025-03-17 20:25:06,661 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:06,661 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:06,665 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:06,665 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:06,665 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:06,666 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret24#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:06,666 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:06,666 INFO L85 PathProgramCache]: Analyzing trace with hash -1126264899, now seen corresponding path program 2 times [2025-03-17 20:25:06,667 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:06,667 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [867290440] [2025-03-17 20:25:06,667 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:06,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:06,681 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 63 statements into 1 equivalence classes. [2025-03-17 20:25:06,684 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 63 of 63 statements. [2025-03-17 20:25:06,684 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:06,684 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:06,755 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:06,756 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:06,756 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [867290440] [2025-03-17 20:25:06,756 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [867290440] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:06,756 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:06,756 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:06,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [87167222] [2025-03-17 20:25:06,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:06,756 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:06,757 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:06,757 INFO L85 PathProgramCache]: Analyzing trace with hash -572510086, now seen corresponding path program 1 times [2025-03-17 20:25:06,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:06,758 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2082156847] [2025-03-17 20:25:06,758 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:06,758 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:06,772 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:25:06,776 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:25:06,777 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:06,777 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:07,000 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:07,000 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:07,000 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2082156847] [2025-03-17 20:25:07,001 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2082156847] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:07,001 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:07,001 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:07,001 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1390946265] [2025-03-17 20:25:07,001 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:07,001 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:07,001 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:07,001 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:07,001 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:07,002 INFO L87 Difference]: Start difference. First operand 38180 states and 69163 transitions. cyclomatic complexity: 30987 Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:07,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:07,220 INFO L93 Difference]: Finished difference Result 46386 states and 81796 transitions. [2025-03-17 20:25:07,220 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46386 states and 81796 transitions. [2025-03-17 20:25:07,415 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 44443 [2025-03-17 20:25:07,554 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46386 states to 46386 states and 81796 transitions. [2025-03-17 20:25:07,555 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46386 [2025-03-17 20:25:07,594 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46386 [2025-03-17 20:25:07,594 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46386 states and 81796 transitions. [2025-03-17 20:25:07,628 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:07,628 INFO L218 hiAutomatonCegarLoop]: Abstraction has 46386 states and 81796 transitions. [2025-03-17 20:25:07,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46386 states and 81796 transitions. [2025-03-17 20:25:08,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46386 to 46323. [2025-03-17 20:25:08,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46323 states, 46323 states have (on average 1.7643934978304514) internal successors, (81732), 46322 states have internal predecessors, (81732), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:08,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46323 states to 46323 states and 81732 transitions. [2025-03-17 20:25:08,298 INFO L240 hiAutomatonCegarLoop]: Abstraction has 46323 states and 81732 transitions. [2025-03-17 20:25:08,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:25:08,299 INFO L432 stractBuchiCegarLoop]: Abstraction has 46323 states and 81732 transitions. [2025-03-17 20:25:08,299 INFO L338 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2025-03-17 20:25:08,299 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 46323 states and 81732 transitions. [2025-03-17 20:25:08,455 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 44386 [2025-03-17 20:25:08,456 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:08,456 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:08,460 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:08,460 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:08,461 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:08,461 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:08,462 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:08,462 INFO L85 PathProgramCache]: Analyzing trace with hash -1126264899, now seen corresponding path program 3 times [2025-03-17 20:25:08,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:08,462 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1459214445] [2025-03-17 20:25:08,462 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:25:08,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:08,478 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 63 statements into 1 equivalence classes. [2025-03-17 20:25:08,481 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 63 of 63 statements. [2025-03-17 20:25:08,481 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:25:08,481 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:08,559 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:08,560 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:08,560 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1459214445] [2025-03-17 20:25:08,560 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1459214445] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:08,560 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:08,560 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:08,560 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [447403491] [2025-03-17 20:25:08,560 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:08,560 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:08,560 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:08,561 INFO L85 PathProgramCache]: Analyzing trace with hash -764803930, now seen corresponding path program 1 times [2025-03-17 20:25:08,561 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:08,561 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [626020007] [2025-03-17 20:25:08,561 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:08,561 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:08,577 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:25:08,586 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:25:08,586 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:08,586 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:08,634 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:08,634 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:08,635 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [626020007] [2025-03-17 20:25:08,635 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [626020007] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:08,635 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:08,635 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:08,635 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1369871097] [2025-03-17 20:25:08,635 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:08,636 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:08,636 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:08,636 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-17 20:25:08,636 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2025-03-17 20:25:08,636 INFO L87 Difference]: Start difference. First operand 46323 states and 81732 transitions. cyclomatic complexity: 35413 Second operand has 6 states, 6 states have (on average 9.833333333333334) internal successors, (59), 6 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:10,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:10,023 INFO L93 Difference]: Finished difference Result 76116 states and 135958 transitions. [2025-03-17 20:25:10,023 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 76116 states and 135958 transitions. [2025-03-17 20:25:10,298 INFO L131 ngComponentsAnalysis]: Automaton has 13 accepting balls. 73488 [2025-03-17 20:25:10,493 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 76116 states to 75425 states and 135050 transitions. [2025-03-17 20:25:10,493 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 75425 [2025-03-17 20:25:10,548 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 75425 [2025-03-17 20:25:10,548 INFO L73 IsDeterministic]: Start isDeterministic. Operand 75425 states and 135050 transitions. [2025-03-17 20:25:10,593 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:10,593 INFO L218 hiAutomatonCegarLoop]: Abstraction has 75425 states and 135050 transitions. [2025-03-17 20:25:10,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75425 states and 135050 transitions. [2025-03-17 20:25:11,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75425 to 54369. [2025-03-17 20:25:11,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54369 states, 54369 states have (on average 1.7710827861465173) internal successors, (96292), 54368 states have internal predecessors, (96292), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:11,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54369 states to 54369 states and 96292 transitions. [2025-03-17 20:25:11,403 INFO L240 hiAutomatonCegarLoop]: Abstraction has 54369 states and 96292 transitions. [2025-03-17 20:25:11,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-17 20:25:11,404 INFO L432 stractBuchiCegarLoop]: Abstraction has 54369 states and 96292 transitions. [2025-03-17 20:25:11,404 INFO L338 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2025-03-17 20:25:11,404 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 54369 states and 96292 transitions. [2025-03-17 20:25:11,570 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 52499 [2025-03-17 20:25:11,570 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:11,570 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:11,578 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:11,578 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:11,578 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:11,579 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret24#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret127#1;havoc __utac_acc__Specification1_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:11,579 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:11,579 INFO L85 PathProgramCache]: Analyzing trace with hash 484676059, now seen corresponding path program 1 times [2025-03-17 20:25:11,579 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:11,579 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1619028896] [2025-03-17 20:25:11,579 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:11,579 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:11,597 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 63 statements into 1 equivalence classes. [2025-03-17 20:25:11,600 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 63 of 63 statements. [2025-03-17 20:25:11,600 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:11,600 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:11,667 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:11,667 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:11,667 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1619028896] [2025-03-17 20:25:11,667 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1619028896] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:11,667 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:11,667 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:11,667 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2060675942] [2025-03-17 20:25:11,667 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:11,668 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:11,668 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:11,668 INFO L85 PathProgramCache]: Analyzing trace with hash 193346872, now seen corresponding path program 1 times [2025-03-17 20:25:11,668 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:11,668 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [201382899] [2025-03-17 20:25:11,668 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:11,668 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:11,680 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 47 statements into 1 equivalence classes. [2025-03-17 20:25:11,682 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 47 of 47 statements. [2025-03-17 20:25:11,683 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:11,683 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:11,738 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:11,738 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:11,738 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [201382899] [2025-03-17 20:25:11,738 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [201382899] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:11,738 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:11,738 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2025-03-17 20:25:11,739 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [700018646] [2025-03-17 20:25:11,739 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:11,739 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:11,739 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:11,739 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2025-03-17 20:25:11,739 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2025-03-17 20:25:11,739 INFO L87 Difference]: Start difference. First operand 54369 states and 96292 transitions. cyclomatic complexity: 41927 Second operand has 8 states, 8 states have (on average 5.875) internal successors, (47), 8 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:13,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:13,175 INFO L93 Difference]: Finished difference Result 55541 states and 98262 transitions. [2025-03-17 20:25:13,175 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55541 states and 98262 transitions. [2025-03-17 20:25:13,415 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53670 [2025-03-17 20:25:13,572 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55541 states to 55541 states and 98262 transitions. [2025-03-17 20:25:13,572 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55541 [2025-03-17 20:25:13,617 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55541 [2025-03-17 20:25:13,617 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55541 states and 98262 transitions. [2025-03-17 20:25:13,654 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:13,654 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55541 states and 98262 transitions. [2025-03-17 20:25:13,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55541 states and 98262 transitions. [2025-03-17 20:25:14,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55541 to 55228. [2025-03-17 20:25:14,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55228 states, 55228 states have (on average 1.7712935467516477) internal successors, (97825), 55227 states have internal predecessors, (97825), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:14,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55228 states to 55228 states and 97825 transitions. [2025-03-17 20:25:14,438 INFO L240 hiAutomatonCegarLoop]: Abstraction has 55228 states and 97825 transitions. [2025-03-17 20:25:14,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2025-03-17 20:25:14,439 INFO L432 stractBuchiCegarLoop]: Abstraction has 55228 states and 97825 transitions. [2025-03-17 20:25:14,439 INFO L338 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2025-03-17 20:25:14,439 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55228 states and 97825 transitions. [2025-03-17 20:25:14,629 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:14,629 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:14,629 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:14,662 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:14,662 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:14,662 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:14,663 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret13#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___4~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret13#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret13#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:14,664 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:14,664 INFO L85 PathProgramCache]: Analyzing trace with hash 1530133435, now seen corresponding path program 1 times [2025-03-17 20:25:14,664 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:14,664 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1012208252] [2025-03-17 20:25:14,664 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:14,664 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:14,688 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 64 statements into 1 equivalence classes. [2025-03-17 20:25:14,692 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 64 of 64 statements. [2025-03-17 20:25:14,692 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:14,692 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:14,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:14,773 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:14,773 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1012208252] [2025-03-17 20:25:14,773 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1012208252] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:14,773 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:14,773 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:14,773 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310924456] [2025-03-17 20:25:14,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:14,773 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:14,773 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:14,773 INFO L85 PathProgramCache]: Analyzing trace with hash -527437786, now seen corresponding path program 1 times [2025-03-17 20:25:14,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:14,773 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1188553224] [2025-03-17 20:25:14,773 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:14,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:14,796 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 119 statements into 1 equivalence classes. [2025-03-17 20:25:14,817 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 119 of 119 statements. [2025-03-17 20:25:14,818 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:14,819 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:15,236 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 32 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:15,236 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:15,236 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1188553224] [2025-03-17 20:25:15,237 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1188553224] provided 0 perfect and 1 imperfect interpolant sequences [2025-03-17 20:25:15,237 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [533521558] [2025-03-17 20:25:15,237 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:15,237 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-03-17 20:25:15,237 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:25:15,254 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-03-17 20:25:15,255 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2025-03-17 20:25:15,728 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 119 statements into 1 equivalence classes. [2025-03-17 20:25:15,772 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 119 of 119 statements. [2025-03-17 20:25:15,772 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:15,772 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:15,776 INFO L256 TraceCheckSpWp]: Trace formula consists of 477 conjuncts, 10 conjuncts are in the unsatisfiable core [2025-03-17 20:25:15,782 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-17 20:25:15,849 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2025-03-17 20:25:15,849 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2025-03-17 20:25:15,849 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [533521558] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:15,849 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2025-03-17 20:25:15,849 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [7] total 10 [2025-03-17 20:25:15,851 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617561838] [2025-03-17 20:25:15,851 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:15,852 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:15,852 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:15,852 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-17 20:25:15,852 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2025-03-17 20:25:15,852 INFO L87 Difference]: Start difference. First operand 55228 states and 97825 transitions. cyclomatic complexity: 42600 Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:16,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:16,065 INFO L93 Difference]: Finished difference Result 55225 states and 97815 transitions. [2025-03-17 20:25:16,065 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55225 states and 97815 transitions. [2025-03-17 20:25:16,299 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:16,456 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55225 states to 55225 states and 97815 transitions. [2025-03-17 20:25:16,457 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55225 [2025-03-17 20:25:16,502 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55225 [2025-03-17 20:25:16,502 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55225 states and 97815 transitions. [2025-03-17 20:25:16,542 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:16,542 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55225 states and 97815 transitions. [2025-03-17 20:25:16,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55225 states and 97815 transitions. [2025-03-17 20:25:17,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55225 to 55224. [2025-03-17 20:25:17,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55224 states, 55224 states have (on average 1.771222656815877) internal successors, (97814), 55223 states have internal predecessors, (97814), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:17,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55224 states to 55224 states and 97814 transitions. [2025-03-17 20:25:17,305 INFO L240 hiAutomatonCegarLoop]: Abstraction has 55224 states and 97814 transitions. [2025-03-17 20:25:17,305 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-17 20:25:17,305 INFO L432 stractBuchiCegarLoop]: Abstraction has 55224 states and 97814 transitions. [2025-03-17 20:25:17,305 INFO L338 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2025-03-17 20:25:17,306 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55224 states and 97814 transitions. [2025-03-17 20:25:17,479 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:17,479 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:17,479 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:17,509 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:17,510 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:17,510 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:17,510 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret13#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___4~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret13#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret13#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret128#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret128#1;havoc __utac_acc__Specification1_spec__3_#t~ret128#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:17,511 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:17,511 INFO L85 PathProgramCache]: Analyzing trace with hash 1959134338, now seen corresponding path program 1 times [2025-03-17 20:25:17,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:17,511 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1475027985] [2025-03-17 20:25:17,511 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:17,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:17,524 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 66 statements into 1 equivalence classes. [2025-03-17 20:25:17,527 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 66 of 66 statements. [2025-03-17 20:25:17,527 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:17,528 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:17,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:17,568 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:17,568 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1475027985] [2025-03-17 20:25:17,568 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1475027985] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:17,568 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:17,568 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:17,568 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [179365599] [2025-03-17 20:25:17,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:17,569 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:17,569 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:17,569 INFO L85 PathProgramCache]: Analyzing trace with hash 157339626, now seen corresponding path program 1 times [2025-03-17 20:25:17,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:17,569 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1554298988] [2025-03-17 20:25:17,569 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:17,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:17,586 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 119 statements into 1 equivalence classes. [2025-03-17 20:25:17,591 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 119 of 119 statements. [2025-03-17 20:25:17,591 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:17,591 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:17,669 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 29 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2025-03-17 20:25:17,670 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:17,670 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1554298988] [2025-03-17 20:25:17,670 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1554298988] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:17,670 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:17,670 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:17,670 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1751591587] [2025-03-17 20:25:17,670 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:17,670 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:17,670 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:17,671 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:17,671 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:17,671 INFO L87 Difference]: Start difference. First operand 55224 states and 97814 transitions. cyclomatic complexity: 42593 Second operand has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:17,958 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:17,958 INFO L93 Difference]: Finished difference Result 55250 states and 97851 transitions. [2025-03-17 20:25:17,958 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55250 states and 97851 transitions. [2025-03-17 20:25:18,494 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:18,644 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55250 states to 55250 states and 97851 transitions. [2025-03-17 20:25:18,645 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55250 [2025-03-17 20:25:18,690 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55250 [2025-03-17 20:25:18,690 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55250 states and 97851 transitions. [2025-03-17 20:25:18,723 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:18,723 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55250 states and 97851 transitions. [2025-03-17 20:25:18,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55250 states and 97851 transitions. [2025-03-17 20:25:19,051 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55250 to 55224. [2025-03-17 20:25:19,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55224 states, 55224 states have (on average 1.7710596841952775) internal successors, (97805), 55223 states have internal predecessors, (97805), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:19,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55224 states to 55224 states and 97805 transitions. [2025-03-17 20:25:19,182 INFO L240 hiAutomatonCegarLoop]: Abstraction has 55224 states and 97805 transitions. [2025-03-17 20:25:19,182 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:19,182 INFO L432 stractBuchiCegarLoop]: Abstraction has 55224 states and 97805 transitions. [2025-03-17 20:25:19,183 INFO L338 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2025-03-17 20:25:19,183 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55224 states and 97805 transitions. [2025-03-17 20:25:19,341 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:19,341 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:19,341 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:19,371 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:19,371 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:19,371 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:19,372 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret13#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___4~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret13#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret13#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret128#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret128#1;havoc __utac_acc__Specification1_spec__3_#t~ret128#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret24#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:19,373 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:19,373 INFO L85 PathProgramCache]: Analyzing trace with hash -686827205, now seen corresponding path program 1 times [2025-03-17 20:25:19,373 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:19,373 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [90642334] [2025-03-17 20:25:19,373 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:19,373 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:19,386 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 68 statements into 1 equivalence classes. [2025-03-17 20:25:19,389 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 68 of 68 statements. [2025-03-17 20:25:19,389 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:19,389 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:19,656 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:19,657 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:19,657 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [90642334] [2025-03-17 20:25:19,657 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [90642334] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:19,657 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:19,657 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:19,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1534257868] [2025-03-17 20:25:19,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:19,657 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:19,658 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:19,658 INFO L85 PathProgramCache]: Analyzing trace with hash 1118899893, now seen corresponding path program 1 times [2025-03-17 20:25:19,658 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:19,658 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [974187744] [2025-03-17 20:25:19,658 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:19,658 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:19,678 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 119 statements into 1 equivalence classes. [2025-03-17 20:25:19,683 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 119 of 119 statements. [2025-03-17 20:25:19,684 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:19,684 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:19,774 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2025-03-17 20:25:19,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:19,774 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [974187744] [2025-03-17 20:25:19,774 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [974187744] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:19,774 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:19,774 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:19,774 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [708766658] [2025-03-17 20:25:19,774 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:19,775 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:19,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:19,775 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:19,775 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:19,775 INFO L87 Difference]: Start difference. First operand 55224 states and 97805 transitions. cyclomatic complexity: 42584 Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:20,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:20,114 INFO L93 Difference]: Finished difference Result 55250 states and 97842 transitions. [2025-03-17 20:25:20,114 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55250 states and 97842 transitions. [2025-03-17 20:25:20,382 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:20,567 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55250 states to 55250 states and 97842 transitions. [2025-03-17 20:25:20,567 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55250 [2025-03-17 20:25:20,618 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55250 [2025-03-17 20:25:20,618 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55250 states and 97842 transitions. [2025-03-17 20:25:20,664 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:20,664 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55250 states and 97842 transitions. [2025-03-17 20:25:20,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55250 states and 97842 transitions. [2025-03-17 20:25:21,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55250 to 55224. [2025-03-17 20:25:21,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55224 states, 55224 states have (on average 1.7708967115746777) internal successors, (97796), 55223 states have internal predecessors, (97796), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:21,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55224 states to 55224 states and 97796 transitions. [2025-03-17 20:25:21,543 INFO L240 hiAutomatonCegarLoop]: Abstraction has 55224 states and 97796 transitions. [2025-03-17 20:25:21,543 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:21,543 INFO L432 stractBuchiCegarLoop]: Abstraction has 55224 states and 97796 transitions. [2025-03-17 20:25:21,543 INFO L338 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2025-03-17 20:25:21,543 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55224 states and 97796 transitions. [2025-03-17 20:25:21,695 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:21,695 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:21,695 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:21,719 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:21,719 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:21,720 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:21,720 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret13#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___4~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret13#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret13#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret128#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret128#1;havoc __utac_acc__Specification1_spec__3_#t~ret128#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret24#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:21,720 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:21,720 INFO L85 PathProgramCache]: Analyzing trace with hash 1278389084, now seen corresponding path program 1 times [2025-03-17 20:25:21,720 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:21,720 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1422934872] [2025-03-17 20:25:21,720 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:21,720 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:21,732 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 70 statements into 1 equivalence classes. [2025-03-17 20:25:21,734 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 70 of 70 statements. [2025-03-17 20:25:21,734 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:21,734 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:21,763 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:21,764 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:21,764 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1422934872] [2025-03-17 20:25:21,764 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1422934872] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:21,764 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:21,764 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:21,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [619028179] [2025-03-17 20:25:21,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:21,764 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:21,764 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:21,765 INFO L85 PathProgramCache]: Analyzing trace with hash 1118899893, now seen corresponding path program 2 times [2025-03-17 20:25:21,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:21,765 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1829091761] [2025-03-17 20:25:21,765 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:21,765 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:21,780 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 119 statements into 2 equivalence classes. [2025-03-17 20:25:21,786 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 48 of 119 statements. [2025-03-17 20:25:21,786 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:21,786 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:21,847 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2025-03-17 20:25:21,847 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:21,847 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1829091761] [2025-03-17 20:25:21,847 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1829091761] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:21,847 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:21,847 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:25:21,848 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1579862704] [2025-03-17 20:25:21,848 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:21,848 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:21,848 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:21,848 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:21,848 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:21,848 INFO L87 Difference]: Start difference. First operand 55224 states and 97796 transitions. cyclomatic complexity: 42575 Second operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:22,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:22,098 INFO L93 Difference]: Finished difference Result 55237 states and 97815 transitions. [2025-03-17 20:25:22,098 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55237 states and 97815 transitions. [2025-03-17 20:25:22,327 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:22,881 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55237 states to 55237 states and 97815 transitions. [2025-03-17 20:25:22,881 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55237 [2025-03-17 20:25:22,908 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55237 [2025-03-17 20:25:22,908 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55237 states and 97815 transitions. [2025-03-17 20:25:22,928 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:22,929 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55237 states and 97815 transitions. [2025-03-17 20:25:22,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55237 states and 97815 transitions. [2025-03-17 20:25:23,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55237 to 55224. [2025-03-17 20:25:23,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55224 states, 55224 states have (on average 1.7708242792988556) internal successors, (97792), 55223 states have internal predecessors, (97792), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:23,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55224 states to 55224 states and 97792 transitions. [2025-03-17 20:25:23,395 INFO L240 hiAutomatonCegarLoop]: Abstraction has 55224 states and 97792 transitions. [2025-03-17 20:25:23,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:23,396 INFO L432 stractBuchiCegarLoop]: Abstraction has 55224 states and 97792 transitions. [2025-03-17 20:25:23,396 INFO L338 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2025-03-17 20:25:23,396 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55224 states and 97792 transitions. [2025-03-17 20:25:23,560 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:23,560 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:23,560 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:23,586 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:23,586 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:23,587 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume !(4 == initPersonOnFloor_~floor#1);" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:23,587 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret13#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___4~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret13#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret13#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1;" "__utac_acc__Specification1_spec__3_#t~ret128#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret128#1;havoc __utac_acc__Specification1_spec__3_#t~ret128#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret24#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:23,587 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:23,587 INFO L85 PathProgramCache]: Analyzing trace with hash -1182995635, now seen corresponding path program 1 times [2025-03-17 20:25:23,588 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:23,588 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782268744] [2025-03-17 20:25:23,588 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:23,588 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:23,599 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 70 statements into 1 equivalence classes. [2025-03-17 20:25:23,602 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 70 of 70 statements. [2025-03-17 20:25:23,602 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:23,602 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:23,633 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:23,633 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:23,633 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [782268744] [2025-03-17 20:25:23,633 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [782268744] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:23,633 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:23,633 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:23,634 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [17342120] [2025-03-17 20:25:23,634 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:23,634 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:23,634 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:23,635 INFO L85 PathProgramCache]: Analyzing trace with hash 1118899893, now seen corresponding path program 3 times [2025-03-17 20:25:23,635 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:23,635 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1895548365] [2025-03-17 20:25:23,635 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:25:23,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:23,656 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 119 statements into 2 equivalence classes. [2025-03-17 20:25:23,659 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 48 of 119 statements. [2025-03-17 20:25:23,659 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:25:23,659 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:23,735 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2025-03-17 20:25:23,736 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:23,736 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1895548365] [2025-03-17 20:25:23,736 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1895548365] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:23,736 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:23,736 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:25:23,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [315025159] [2025-03-17 20:25:23,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:23,736 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:23,736 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:23,736 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:23,737 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:23,737 INFO L87 Difference]: Start difference. First operand 55224 states and 97792 transitions. cyclomatic complexity: 42571 Second operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:24,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:24,164 INFO L93 Difference]: Finished difference Result 55207 states and 97762 transitions. [2025-03-17 20:25:24,164 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55207 states and 97762 transitions. [2025-03-17 20:25:24,372 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:24,516 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55207 states to 55207 states and 97762 transitions. [2025-03-17 20:25:24,517 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55207 [2025-03-17 20:25:24,559 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55207 [2025-03-17 20:25:24,560 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55207 states and 97762 transitions. [2025-03-17 20:25:24,597 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:24,597 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55207 states and 97762 transitions. [2025-03-17 20:25:24,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55207 states and 97762 transitions. [2025-03-17 20:25:24,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55207 to 55206. [2025-03-17 20:25:25,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55206 states, 55206 states have (on average 1.770840126073253) internal successors, (97761), 55205 states have internal predecessors, (97761), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:25,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55206 states to 55206 states and 97761 transitions. [2025-03-17 20:25:25,522 INFO L240 hiAutomatonCegarLoop]: Abstraction has 55206 states and 97761 transitions. [2025-03-17 20:25:25,523 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:25,523 INFO L432 stractBuchiCegarLoop]: Abstraction has 55206 states and 97761 transitions. [2025-03-17 20:25:25,523 INFO L338 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2025-03-17 20:25:25,523 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55206 states and 97761 transitions. [2025-03-17 20:25:25,700 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:25,700 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:25,700 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:25,726 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:25,726 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:25,726 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:25,727 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret13#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___4~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret13#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret13#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret24#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:25,727 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:25,727 INFO L85 PathProgramCache]: Analyzing trace with hash 1690471302, now seen corresponding path program 1 times [2025-03-17 20:25:25,728 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:25,728 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [981366363] [2025-03-17 20:25:25,728 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:25,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:25,747 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 71 statements into 1 equivalence classes. [2025-03-17 20:25:25,750 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 71 of 71 statements. [2025-03-17 20:25:25,751 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:25,751 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:25,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:25,797 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:25,797 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [981366363] [2025-03-17 20:25:25,797 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [981366363] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:25,797 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:25,797 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:25,797 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1693100484] [2025-03-17 20:25:25,797 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:25,797 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:25,797 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:25,797 INFO L85 PathProgramCache]: Analyzing trace with hash 434122481, now seen corresponding path program 1 times [2025-03-17 20:25:25,797 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:25,797 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1777787485] [2025-03-17 20:25:25,797 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:25,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:25,821 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 119 statements into 1 equivalence classes. [2025-03-17 20:25:25,826 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 119 of 119 statements. [2025-03-17 20:25:25,826 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:25,826 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:25,914 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:25,914 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:25,915 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1777787485] [2025-03-17 20:25:25,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1777787485] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:25,915 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:25,915 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:25:25,915 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1827649875] [2025-03-17 20:25:25,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:25,915 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:25,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:25,916 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:25,916 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:25,916 INFO L87 Difference]: Start difference. First operand 55206 states and 97761 transitions. cyclomatic complexity: 42558 Second operand has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:26,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:26,172 INFO L93 Difference]: Finished difference Result 55219 states and 97778 transitions. [2025-03-17 20:25:26,172 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55219 states and 97778 transitions. [2025-03-17 20:25:26,445 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:26,629 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55219 states to 55219 states and 97778 transitions. [2025-03-17 20:25:26,629 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55219 [2025-03-17 20:25:26,683 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55219 [2025-03-17 20:25:26,683 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55219 states and 97778 transitions. [2025-03-17 20:25:26,731 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:26,731 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55219 states and 97778 transitions. [2025-03-17 20:25:26,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55219 states and 97778 transitions. [2025-03-17 20:25:27,448 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55219 to 55206. [2025-03-17 20:25:27,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55206 states, 55206 states have (on average 1.7707314422345397) internal successors, (97755), 55205 states have internal predecessors, (97755), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:27,594 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55206 states to 55206 states and 97755 transitions. [2025-03-17 20:25:27,594 INFO L240 hiAutomatonCegarLoop]: Abstraction has 55206 states and 97755 transitions. [2025-03-17 20:25:27,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:27,595 INFO L432 stractBuchiCegarLoop]: Abstraction has 55206 states and 97755 transitions. [2025-03-17 20:25:27,595 INFO L338 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2025-03-17 20:25:27,595 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55206 states and 97755 transitions. [2025-03-17 20:25:27,762 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:27,762 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:27,762 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:27,788 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:27,788 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:27,789 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume !(3 == initPersonOnFloor_~person#1);" "assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:27,789 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret13#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___4~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret13#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret13#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret24#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:27,789 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:27,790 INFO L85 PathProgramCache]: Analyzing trace with hash 339538297, now seen corresponding path program 1 times [2025-03-17 20:25:27,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:27,790 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1790163390] [2025-03-17 20:25:27,790 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:27,790 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:27,803 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 72 statements into 1 equivalence classes. [2025-03-17 20:25:27,805 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 72 of 72 statements. [2025-03-17 20:25:27,806 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:27,806 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:27,843 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:27,843 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:27,843 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1790163390] [2025-03-17 20:25:27,843 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1790163390] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:27,843 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:27,844 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:27,844 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [656187459] [2025-03-17 20:25:27,844 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:27,844 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:27,844 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:27,844 INFO L85 PathProgramCache]: Analyzing trace with hash 434122481, now seen corresponding path program 2 times [2025-03-17 20:25:27,844 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:27,844 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [409950918] [2025-03-17 20:25:27,844 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:27,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:27,861 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 119 statements into 2 equivalence classes. [2025-03-17 20:25:27,869 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 48 of 119 statements. [2025-03-17 20:25:27,869 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:27,869 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:27,929 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2025-03-17 20:25:27,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:27,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [409950918] [2025-03-17 20:25:27,929 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [409950918] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:27,929 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:27,929 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:27,929 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1925545539] [2025-03-17 20:25:27,929 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:27,929 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:27,929 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:27,929 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:27,930 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:27,930 INFO L87 Difference]: Start difference. First operand 55206 states and 97755 transitions. cyclomatic complexity: 42552 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:28,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:28,173 INFO L93 Difference]: Finished difference Result 55219 states and 97772 transitions. [2025-03-17 20:25:28,173 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55219 states and 97772 transitions. [2025-03-17 20:25:28,759 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:28,900 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55219 states to 55219 states and 97772 transitions. [2025-03-17 20:25:28,900 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55219 [2025-03-17 20:25:28,943 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55219 [2025-03-17 20:25:28,943 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55219 states and 97772 transitions. [2025-03-17 20:25:28,976 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:28,977 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55219 states and 97772 transitions. [2025-03-17 20:25:29,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55219 states and 97772 transitions. [2025-03-17 20:25:29,338 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55219 to 55206. [2025-03-17 20:25:29,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55206 states, 55206 states have (on average 1.7706227583958265) internal successors, (97749), 55205 states have internal predecessors, (97749), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:29,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55206 states to 55206 states and 97749 transitions. [2025-03-17 20:25:29,474 INFO L240 hiAutomatonCegarLoop]: Abstraction has 55206 states and 97749 transitions. [2025-03-17 20:25:29,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:29,475 INFO L432 stractBuchiCegarLoop]: Abstraction has 55206 states and 97749 transitions. [2025-03-17 20:25:29,475 INFO L338 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2025-03-17 20:25:29,475 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55206 states and 97749 transitions. [2025-03-17 20:25:29,625 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:29,625 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:29,626 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:29,651 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:29,651 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:29,651 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret95#1, main_~retValue_acc~16#1, main_~tmp~20#1;havoc main_~retValue_acc~16#1;havoc main_~tmp~20#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1;" "main_#t~ret95#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~20#1 := main_#t~ret95#1;havoc main_#t~ret95#1;" "assume 0 != main_~tmp~20#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;havoc bigMacCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bigMacCall_#t~ret88#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~17#1 := bigMacCall_#t~ret88#1;havoc bigMacCall_#t~ret88#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume !(3 == initPersonOnFloor_~person#1);" "assume !(4 == initPersonOnFloor_~person#1);" "assume !(5 == initPersonOnFloor_~person#1);" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret88#1, bigMacCall_~tmp~17#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;havoc angelinaCall_~tmp~14#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "angelinaCall_#t~ret85#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~14#1 := angelinaCall_#t~ret85#1;havoc angelinaCall_#t~ret85#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~14#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret85#1, angelinaCall_~tmp~14#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret89#1, cleanup_#t~ret90#1, cleanup_~i~1#1, cleanup_~tmp~18#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~1#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~18#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~1#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:25:29,651 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~3#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret53#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret13#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___4~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret13#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret13#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1;" "timeShift_#t~ret55#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume !(0 != continueInDirection_~tmp~6#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" "assume true;cleanup_~__cil_tmp4~1#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~1#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1;" "cleanup_#t~ret89#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1;" "isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1;" "cleanup_#t~ret90#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~18#1 := cleanup_#t~ret90#1;havoc cleanup_#t~ret90#1;" "assume !(0 != cleanup_~tmp~18#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~8#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1;" "timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~10#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~10#1;" "stopRequestedInDirection_#t~ret23#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~10#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~5#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1;" "assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1;" "stopRequestedInDirection__wrappee__weight_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret14#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret14#1;" "assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;" "stopRequestedInDirection_#t~ret26#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1;" "timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1;" "continueInDirection_#t~ret27#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1;" "assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~26#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1;" "__utac_acc__Specification1_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~26#1 := __utac_acc__Specification1_spec__3_#t~ret126#1;havoc __utac_acc__Specification1_spec__3_#t~ret126#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~26#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret126#1, __utac_acc__Specification1_spec__3_#t~ret127#1, __utac_acc__Specification1_spec__3_#t~ret128#1, __utac_acc__Specification1_spec__3_#t~ret129#1, __utac_acc__Specification1_spec__3_#t~ret130#1, __utac_acc__Specification1_spec__3_#t~ret131#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~26#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:25:29,652 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:29,652 INFO L85 PathProgramCache]: Analyzing trace with hash 190045602, now seen corresponding path program 1 times [2025-03-17 20:25:29,652 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:29,652 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [932081459] [2025-03-17 20:25:29,652 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:29,652 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:29,666 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 73 statements into 1 equivalence classes. [2025-03-17 20:25:29,670 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 73 of 73 statements. [2025-03-17 20:25:29,670 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:29,670 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:29,700 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:29,700 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:29,701 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [932081459] [2025-03-17 20:25:29,701 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [932081459] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:29,701 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:29,701 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:29,701 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [5852899] [2025-03-17 20:25:29,701 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:29,701 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:29,702 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:29,702 INFO L85 PathProgramCache]: Analyzing trace with hash -527437786, now seen corresponding path program 2 times [2025-03-17 20:25:29,702 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:29,702 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [546098836] [2025-03-17 20:25:29,702 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:29,702 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:29,720 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 119 statements into 2 equivalence classes. [2025-03-17 20:25:29,724 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 48 of 119 statements. [2025-03-17 20:25:29,724 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:29,724 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:29,808 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2025-03-17 20:25:29,809 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:29,810 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [546098836] [2025-03-17 20:25:29,810 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [546098836] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:29,810 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:29,810 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:29,810 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1844750323] [2025-03-17 20:25:29,810 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:29,810 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:29,810 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:29,811 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:25:29,811 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:25:29,811 INFO L87 Difference]: Start difference. First operand 55206 states and 97749 transitions. cyclomatic complexity: 42546 Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:30,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:30,244 INFO L93 Difference]: Finished difference Result 55206 states and 97748 transitions. [2025-03-17 20:25:30,244 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55206 states and 97748 transitions. [2025-03-17 20:25:30,479 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 53364 [2025-03-17 20:25:30,647 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55206 states to 55206 states and 97748 transitions. [2025-03-17 20:25:30,647 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55206 [2025-03-17 20:25:30,698 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55206 [2025-03-17 20:25:30,698 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55206 states and 97748 transitions. [2025-03-17 20:25:30,738 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:30,738 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55206 states and 97748 transitions. [2025-03-17 20:25:30,771 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55206 states and 97748 transitions. [2025-03-17 20:25:31,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55206 to 55206. [2025-03-17 20:25:31,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55206 states, 55206 states have (on average 1.7706046444227077) internal successors, (97748), 55205 states have internal predecessors, (97748), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)